commit 1dd0428713ff34f4674f48bbe39bb194e787e76c
author Kevin Hamacher <hamacher@google.com> Wed Mar 20 10:35:47 2019 -0700
committer Copybara-Service <copybara-worker@google.com> Wed Mar 20 10:36:11 2019 -0700
tree 310d20d5d4fc04f74790f951ccbf17f20708b6cd
parent 52f4c1f9275268ca5bff43391cda6e8e851c790a

Add missing chdir() in the init process

PiperOrigin-RevId: 239425921
Change-Id: Ia1b02ae0a2f319faa601d6098a9f94a3043656a8

sandboxed_api/sandbox2/forkserver.cc

diff --git a/sandboxed_api/sandbox2/forkserver.cc b/sandboxed_api/sandbox2/forkserver.cc
index 1ad8f95..085f0b6 100644
--- a/sandboxed_api/sandbox2/forkserver.cc
+++ b/sandboxed_api/sandbox2/forkserver.cc
@@ -158,6 +158,7 @@
   } else if (child > 0) {
     // Perform some sanitization (basically equals to SanitizeEnvironment
     // except that it does not require /proc to be available).
+    SAPI_RAW_CHECK(chdir("/") == 0, "changing init cwd failed");
     setsid();
     if (prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0) != 0) {
       SAPI_RAW_PLOG(ERROR, "prctl(PR_SET_PDEATHSIG, SIGKILL) failed");