diff options
| author | Matthieu Herrb <matthieu.herrb@laas.fr> | 2011-10-17 22:27:35 +0200 |
|---|---|---|
| committer | Matthieu Herrb <matthieu.herrb@laas.fr> | 2011-10-18 15:58:00 +0200 |
| commit | b67581cf825940fdf52bf2e0af4330e695d724a4 (patch) | |
| tree | fa7513611c3f4beedbb7c00123011946f03d7cb2 /doc | |
| parent | 6ba44b91e37622ef8c146d8f2ac92d708a18ed34 (diff) | |
Fix CVE-2011-4029: File permission change vulnerability.
Use fchmod() to change permissions of the lock file instead
of chmod(), thus avoid the race that can be exploited to set
a symbolic link to any file or directory in the system.
Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions