|
 |
15c49f |
diff -up ./src/copy_file.c.symbolic-link-attack-5 ./src/copy_file.c
|
|
|
15c49f |
--- ./src/copy_file.c.symbolic-link-attack-5 2021-02-02 17:18:05.355567274 +0100
|
|
|
15c49f |
+++ ./src/copy_file.c 2021-02-02 17:19:09.904671563 +0100
|
|
|
15c49f |
@@ -128,7 +128,6 @@ write_error:
|
|
|
15c49f |
}
|
|
|
15c49f |
}
|
|
|
15c49f |
|
|
|
15c49f |
-#ifdef HAVE_SELINUX
|
|
|
15c49f |
bool
|
|
|
15c49f |
sudo_check_temp_file(int tfd, const char *tfile, uid_t uid, struct stat *sb)
|
|
|
15c49f |
{
|
|
|
15c49f |
@@ -158,4 +157,3 @@ sudo_check_temp_file(int tfd, const char
|
|
|
15c49f |
}
|
|
|
15c49f |
debug_return_bool(true);
|
|
|
15c49f |
}
|
|
|
15c49f |
-#endif /* SELINUX */
|
|
|
15c49f |
diff -up ./src/sudo_edit.c.symbolic-link-attack-5 ./src/sudo_edit.c
|
|
|
15c49f |
--- ./src/sudo_edit.c.symbolic-link-attack-5 2021-02-02 17:18:05.355567274 +0100
|
|
|
15c49f |
+++ ./src/sudo_edit.c 2021-02-02 17:18:05.356567260 +0100
|
|
|
15c49f |
@@ -692,24 +692,17 @@ sudo_edit_copy_tfiles(struct command_det
|
|
|
15c49f |
|
|
|
15c49f |
/* Copy contents of temp files to real ones. */
|
|
|
15c49f |
for (i = 0; i < nfiles; i++) {
|
|
|
15c49f |
- int rc = -1;
|
|
|
15c49f |
sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO,
|
|
|
15c49f |
"seteuid(%u)", (unsigned int)user_details.uid);
|
|
|
15c49f |
if (seteuid(user_details.uid) != 0)
|
|
|
15c49f |
sudo_fatal("seteuid(%u)", (unsigned int)user_details.uid);
|
|
|
15c49f |
tfd = sudo_edit_open(tf[i].tfile, O_RDONLY,
|
|
|
15c49f |
S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH, NULL);
|
|
|
15c49f |
- if (tfd != -1)
|
|
|
15c49f |
- rc = fstat(tfd, &sb);
|
|
|
15c49f |
- sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO,
|
|
|
15c49f |
- "seteuid(%u)", ROOT_UID);
|
|
|
15c49f |
if (seteuid(ROOT_UID) != 0)
|
|
|
15c49f |
sudo_fatal("seteuid(ROOT_UID)");
|
|
|
15c49f |
- if (rc == -1 || !S_ISREG(sb.st_mode)) {
|
|
|
15c49f |
- if (rc == -1)
|
|
|
15c49f |
- sudo_warn("%s", tf[i].tfile);
|
|
|
15c49f |
- else
|
|
|
15c49f |
- sudo_warnx(U_("%s: not a regular file"), tf[i].tfile);
|
|
|
15c49f |
+ sudo_debug_printf(SUDO_DEBUG_INFO|SUDO_DEBUG_LINENO,
|
|
|
15c49f |
+ "seteuid(%u)", ROOT_UID);
|
|
|
15c49f |
+ if (tfd == -1 || !sudo_check_temp_file(tfd, tf[i].tfile, user_details.uid, &sb)) {
|
|
|
15c49f |
sudo_warnx(U_("%s left unmodified"), tf[i].ofile);
|
|
|
15c49f |
if (tfd != -1)
|
|
|
15c49f |
close(tfd);
|