|
 |
790dca |
From ca4b156b2059ee00a9143313267ee4a098967d76 Mon Sep 17 00:00:00 2001
|
|
|
790dca |
From: Mariusz Tkaczyk <mariusz.tkaczyk@linux.intel.com>
|
|
|
790dca |
Date: Tue, 24 Nov 2020 16:41:01 +0100
|
|
|
790dca |
Subject: [PATCH 101/108] Monitor: don't use default modes when creating a file
|
|
|
790dca |
|
|
|
790dca |
Replace fopen() calls by open() with creation mode directly specified.
|
|
|
790dca |
This fixes the potential security issue. Use octal values instead masks.
|
|
|
790dca |
|
|
|
790dca |
Signed-off-by: Mariusz Tkaczyk <mariusz.tkaczyk@linux.intel.com>
|
|
|
790dca |
---
|
|
|
790dca |
Monitor.c | 17 ++++++++++++-----
|
|
|
790dca |
1 file changed, 12 insertions(+), 5 deletions(-)
|
|
|
790dca |
|
|
|
790dca |
diff --git a/Monitor.c b/Monitor.c
|
|
|
790dca |
index 7fd4808..a82e99d 100644
|
|
|
790dca |
--- a/Monitor.c
|
|
|
790dca |
+++ b/Monitor.c
|
|
|
790dca |
@@ -305,8 +305,11 @@ static int make_daemon(char *pidfile)
|
|
|
790dca |
if (!pidfile)
|
|
|
790dca |
printf("%d\n", pid);
|
|
|
790dca |
else {
|
|
|
790dca |
- FILE *pid_file;
|
|
|
790dca |
- pid_file=fopen(pidfile, "w");
|
|
|
790dca |
+ FILE *pid_file = NULL;
|
|
|
790dca |
+ int fd = open(pidfile, O_WRONLY | O_CREAT | O_TRUNC,
|
|
|
790dca |
+ 0644);
|
|
|
790dca |
+ if (fd >= 0)
|
|
|
790dca |
+ pid_file = fdopen(fd, "w");
|
|
|
790dca |
if (!pid_file)
|
|
|
790dca |
perror("cannot create pid file");
|
|
|
790dca |
else {
|
|
|
790dca |
@@ -368,13 +371,17 @@ static void write_autorebuild_pid()
|
|
|
790dca |
{
|
|
|
790dca |
char path[PATH_MAX];
|
|
|
790dca |
int pid;
|
|
|
790dca |
- FILE *fp;
|
|
|
790dca |
+ FILE *fp = NULL;
|
|
|
790dca |
sprintf(path, "%s/autorebuild.pid", MDMON_DIR);
|
|
|
790dca |
|
|
|
790dca |
- if (mkdir(MDMON_DIR, S_IRWXU) < 0 && errno != EEXIST) {
|
|
|
790dca |
+ if (mkdir(MDMON_DIR, 0700) < 0 && errno != EEXIST) {
|
|
|
790dca |
pr_err("Can't create autorebuild.pid file\n");
|
|
|
790dca |
} else {
|
|
|
790dca |
- fp = fopen(path, "w");
|
|
|
790dca |
+ int fd = open(path, O_WRONLY | O_CREAT | O_TRUNC, 0700);
|
|
|
790dca |
+
|
|
|
790dca |
+ if (fd >= 0)
|
|
|
790dca |
+ fp = fdopen(fd, "w");
|
|
|
790dca |
+
|
|
|
790dca |
if (!fp)
|
|
|
790dca |
pr_err("Can't create autorebuild.pid file\n");
|
|
|
790dca |
else {
|
|
|
790dca |
--
|
|
|
790dca |
2.7.5
|
|
|
790dca |
|