×
Close
The permissions on this repository are being updated. This may take a while.
During this time, you or some of the project's contributors may not be able
to push to this repository.
Blame SOURCES/0183-abrtd-switch-owner-of-the-dump-location-to-root.patch
7853e13bbde759b0d5bac91d8b12748a8893181c
baab13 From 57bc5697db222c96cb3adbee635f072abeeff6ad Mon Sep 17 00:00:00 2001baab13 From: Jakub Filak <jfilak@redhat.com>baab13 Date: Wed, 30 Sep 2015 14:14:31 +0200baab13 Subject: [PATCH] abrtd: switch owner of the dump location to 'root'baab13 baab13 Additional hardening suggested by Florian Weimer <fweimer@redhat.com>baab13 baab13 Related to CVE-2015-5287baab13 Related: #1262252baab13 baab13 Signed-off-by: Jakub Filak <jfilak@redhat.com>baab13 ---baab13 src/daemon/abrtd.c | 2 +-baab13 1 file changed, 1 insertion(+), 1 deletion(-)baab13 baab13 diff --git a/src/daemon/abrtd.c b/src/daemon/abrtd.cbaab13 index b1252d2..b79e940 100644baab13 --- a/src/daemon/abrtd.cbaab13 +++ b/src/daemon/abrtd.cbaab13 @@ -164,7 +164,7 @@ static void sanitize_dump_dir_rights(void)baab13 * us with thousands of bogus or malicious dumps */baab13 /* 07000 bits are setuid, setgit, and sticky, and they must be unset */baab13 /* 00777 bits are usual "rwxrwxrwx" access rights */baab13 - ensure_writable_dir(g_settings_dump_location, 0755, "abrt");baab13 + ensure_writable_dir_group(g_settings_dump_location, 0751, "root", "abrt");baab13 /* temp dir */baab13 ensure_writable_dir(VAR_RUN"/abrt", 0755, "root");baab13 }baab13 -- baab13 1.8.3.1baab13
