Conf: Make 'configure check' command restricted

While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.
This commit is contained in:
Ondrej Zajicek 2022-11-09 22:02:46 +01:00
parent 371eb49043
commit bbac9ca958

View file

@ -282,6 +282,9 @@ cmd_read_config(const char *name)
void void
cmd_check_config(const char *name) cmd_check_config(const char *name)
{ {
if (cli_access_restricted())
return;
struct config *conf = cmd_read_config(name); struct config *conf = cmd_read_config(name);
if (!conf) if (!conf)
return; return;