Jan F. Chadima c1398b
diff -up openssh-5.2p1/session.c.homechroot openssh-5.2p1/session.c
Jan F. Chadima c1398b
--- openssh-5.2p1/session.c.homechroot	2009-06-23 11:33:36.052163641 +0200
Jan F. Chadima c1398b
+++ openssh-5.2p1/session.c	2009-06-23 11:33:36.372159228 +0200
Jan F. Chadima c1398b
@@ -1398,6 +1398,8 @@ do_nologin(struct passwd *pw)
Jan F. Chadima c1398b
 	}
Jan F. Chadima c1398b
 }
Jan F. Chadima c1398b
 
Jan F. Chadima c1398b
+int	chroot_no_tree = 0;
Jan F. Chadima c1398b
+
Jan F. Chadima c1398b
 /*
Jan F. Chadima c1398b
  * Chroot into a directory after checking it for safety: all path components
Jan F. Chadima c1398b
  * must be root-owned directories with strict permissions.
Jan F. Chadima c1398b
@@ -1408,6 +1410,7 @@ safely_chroot(const char *path, uid_t ui
Jan F. Chadima 061e21
 	const char *cp;
Jan F. Chadima 061e21
 	char component[MAXPATHLEN];
Jan F. Chadima 061e21
 	struct stat st;
Jan F. Chadima 061e21
+	int last;
Jan F. Chadima 061e21
 
Jan F. Chadima 061e21
 	if (*path != '/')
Jan F. Chadima 061e21
 		fatal("chroot path does not begin at root");
Jan F. Chadima c1398b
@@ -1419,7 +1422,7 @@ safely_chroot(const char *path, uid_t ui
Jan F. Chadima 061e21
 	 * root-owned directory with strict permissions.
Jan F. Chadima 061e21
 	 */
Jan F. Chadima 061e21
 	for (cp = path; cp != NULL;) {
Jan F. Chadima 061e21
-		if ((cp = strchr(cp, '/')) == NULL)
Jan F. Chadima 061e21
+		if (((last = ((cp = strchr(cp, '/')) == NULL))))
Jan F. Chadima 061e21
 			strlcpy(component, path, sizeof(component));
Jan F. Chadima 061e21
 		else {
Jan F. Chadima 061e21
 			cp++;
Jan F. Chadima c1398b
@@ -1432,13 +1435,15 @@ safely_chroot(const char *path, uid_t ui
Jan F. Chadima 061e21
 		if (stat(component, &st) != 0)
Jan F. Chadima 061e21
 			fatal("%s: stat(\"%s\"): %s", __func__,
Jan F. Chadima 061e21
 			    component, strerror(errno));
Jan F. Chadima 061e21
-		if (st.st_uid != 0 || (st.st_mode & 022) != 0)
Jan F. Chadima 061e21
+		if ((st.st_uid != 0 || (st.st_mode & 022) != 0) && !(last && st.st_uid == uid))
Jan F. Chadima 061e21
 			fatal("bad ownership or modes for chroot "
Jan F. Chadima 061e21
 			    "directory %s\"%s\"", 
Jan F. Chadima 061e21
 			    cp == NULL ? "" : "component ", component);
Jan F. Chadima c1398b
 		if (!S_ISDIR(st.st_mode))
Jan F. Chadima c1398b
 			fatal("chroot path %s\"%s\" is not a directory",
Jan F. Chadima c1398b
 			    cp == NULL ? "" : "component ", component);
Jan F. Chadima c1398b
+		if (st.st_uid != uid)
Jan F. Chadima c1398b
+			++chroot_no_tree;
Jan F. Chadima c1398b
 
Jan F. Chadima c1398b
 	}
Jan F. Chadima c1398b
 
Jan F. Chadima c1398b
diff -up openssh-5.2p1/sftp-server.c.homechroot openssh-5.2p1/sftp-server.c
Jan F. Chadima c1398b
--- openssh-5.2p1/sftp-server.c.homechroot	2008-07-04 06:10:19.000000000 +0200
Jan F. Chadima c1398b
+++ openssh-5.2p1/sftp-server.c	2009-06-23 11:33:36.374154561 +0200
Jan F. Chadima c1398b
@@ -887,6 +887,7 @@ process_opendir(void)
Jan F. Chadima c1398b
 static void
Jan F. Chadima c1398b
 process_readdir(void)
Jan F. Chadima c1398b
 {
Jan F. Chadima c1398b
+	extern int chroot_no_tree;
Jan F. Chadima c1398b
 	DIR *dirp;
Jan F. Chadima c1398b
 	struct dirent *dp;
Jan F. Chadima c1398b
 	char *path;
Jan F. Chadima c1398b
@@ -920,7 +921,7 @@ process_readdir(void)
Jan F. Chadima c1398b
 				continue;
Jan F. Chadima c1398b
 			stat_to_attrib(&st, &(stats[count].attrib));
Jan F. Chadima c1398b
 			stats[count].name = xstrdup(dp->d_name);
Jan F. Chadima c1398b
-			stats[count].long_name = ls_file(dp->d_name, &st, 0);
Jan F. Chadima c1398b
+			stats[count].long_name = ls_file(dp->d_name, &st, chroot_no_tree);
Jan F. Chadima c1398b
 			count++;
Jan F. Chadima c1398b
 			/* send up to 100 entries in one message */
Jan F. Chadima c1398b
 			/* XXX check packet size instead */
Jan F. Chadima c1398b
diff -up openssh-5.2p1/sftp-server-main.c.homechroot openssh-5.2p1/sftp-server-main.c
Jan F. Chadima c1398b
--- openssh-5.2p1/sftp-server-main.c.homechroot	2009-02-21 22:47:02.000000000 +0100
Jan F. Chadima c1398b
+++ openssh-5.2p1/sftp-server-main.c	2009-06-23 11:33:36.378159051 +0200
Jan F. Chadima c1398b
@@ -27,6 +27,8 @@
Jan F. Chadima c1398b
 #include "sftp.h"
Jan F. Chadima c1398b
 #include "misc.h"
Jan F. Chadima c1398b
 
Jan F. Chadima c1398b
+int chroot_no_tree = 0;
Jan F. Chadima c1398b
+
Jan F. Chadima c1398b
 void
Jan F. Chadima c1398b
 cleanup_exit(int i)
Jan F. Chadima c1398b
 {