mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2025-01-22 16:44:32 +01:00
Relax security permissions on '.seq' file creation - the strict,
but odd permissions resulted in a security alert from 110.neggrpperm PR: kern/165533 Submitted by: Anton Shterenlikht <mexas@bristol.ac.uk> Submitted by: J B <jb.1234abcd@gmail.com> Approved by: cperciva MFC after: 1 week
This commit is contained in:
parent
e5d9109aab
commit
31fd5c1101
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=236289
@ -846,7 +846,7 @@ mktemps(const struct printer *pp)
|
||||
|
||||
(void) snprintf(buf, sizeof(buf), "%s/.seq", pp->spool_dir);
|
||||
seteuid(euid);
|
||||
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) {
|
||||
if ((fd = open(buf, O_RDWR|O_CREAT, 0664)) < 0) {
|
||||
printf("%s: cannot create %s\n", progname, buf);
|
||||
exit(1);
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user