From 9a4100678fea4d60ec93d35f4c5de2e9ad054f3a Mon Sep 17 00:00:00 2001

From: Jakub Filak <jfilak@redhat.com>

Date: Wed, 29 Apr 2015 14:13:57 +0200

Subject: [ABRT PATCH] a-a-i-d-t-a-cache: sanitize umask

We cannot trust anything when running suided program.

Related: #1216962

Signed-off-by: Jakub Filak <jfilak@redhat.com>

---

 src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c | 3 +++

 1 file changed, 3 insertions(+)

diff --git a/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c b/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c

index eb2f7c5..cd9ee7a 100644

--- a/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c

+++ b/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c

@@ -182,6 +182,9 @@ int main(int argc, char **argv)

         if (u != 0)

             strcpy(path_env, "PATH=/usr/bin:/bin:"BIN_DIR);

         putenv(path_env);

+

+        /* Use safe umask */

+        umask(0022);

     }

     execvp(EXECUTABLE, (char **)args);

-- 

1.8.3.1