Blame SOURCES/autofs-5.1.4-fix-flag-file-permission.patch

d5dcad
autofs-5.1.4 - fix flag file permission
d5dcad
d5dcad
From: Ian Kent <raven@themaw.net>
d5dcad
d5dcad
The flag file used to check if automount(8) is running was being
d5dcad
created with mode 0 which caused unnecessary dac_override AVC
d5dcad
failures.
d5dcad
d5dcad
There's no reason to protect this file so just use 0644 as the
d5dcad
file permission.
d5dcad
d5dcad
Signed-off-by: Ian Kent <raven@themaw.net>
d5dcad
---
d5dcad
 CHANGELOG     |    3 +++
d5dcad
 daemon/flag.c |    2 +-
d5dcad
 2 files changed, 4 insertions(+), 1 deletion(-)
d5dcad
d5dcad
diff --git a/CHANGELOG b/CHANGELOG
d5dcad
index 246279ae..d07d88ce 100644
d5dcad
--- a/CHANGELOG
d5dcad
+++ b/CHANGELOG
d5dcad
@@ -1,3 +1,6 @@
d5dcad
+xx/xx/2018 autofs-5.1.5
d5dcad
+- fix flag file permission.
d5dcad
+
d5dcad
 19/12/2017 autofs-5.1.4
d5dcad
 - fix spec file url.
d5dcad
 - fix unset tsd group name handling.
d5dcad
diff --git a/daemon/flag.c b/daemon/flag.c
d5dcad
index 99f26847..ff9858c8 100644
d5dcad
--- a/daemon/flag.c
d5dcad
+++ b/daemon/flag.c
d5dcad
@@ -164,7 +164,7 @@ int aquire_flag_file(void)
d5dcad
 	while (!we_created_flagfile) {
d5dcad
 		int errsv, i, j;
d5dcad
 
d5dcad
-		i = open_fd_mode(linkf, O_WRONLY|O_CREAT, 0);
d5dcad
+		i = open_fd_mode(linkf, O_WRONLY|O_CREAT, 0644);
d5dcad
 		if (i < 0) {
d5dcad
 			release_flag_file();
d5dcad
 			return 0;