aboutsummaryrefslogtreecommitdiff
path: root/sysutils
diff options
context:
space:
mode:
authorKris Kennaway <kris@FreeBSD.org>2000-01-30 02:19:34 +0000
committerKris Kennaway <kris@FreeBSD.org>2000-01-30 02:19:34 +0000
commitf3ea91ef9652342d0b77377b2ebc71bff15588f9 (patch)
treefadf20069706ed03e4e5cf63c5e9737b7cca6f87 /sysutils
parent394c5a75bd53ad5ea5759224a107ab6de255438b (diff)
downloadports-f3ea91ef9652342d0b77377b2ebc71bff15588f9.tar.gz
ports-f3ea91ef9652342d0b77377b2ebc71bff15588f9.zip
Drop privileges before executing user commands
Submitted by: jedgar
Notes
Notes: svn path=/head/; revision=25306
Diffstat (limited to 'sysutils')
-rw-r--r--sysutils/ascpu/files/patch-sec0121
1 files changed, 21 insertions, 0 deletions
diff --git a/sysutils/ascpu/files/patch-sec01 b/sysutils/ascpu/files/patch-sec01
new file mode 100644
index 000000000000..d54a776f30a4
--- /dev/null
+++ b/sysutils/ascpu/files/patch-sec01
@@ -0,0 +1,21 @@
+--- ascpu_x.c.orig Thu Dec 16 17:45:26 1999
++++ ascpu_x.c Wed Dec 29 20:47:32 1999
+@@ -6,6 +6,7 @@
+ * This software is distributed under GPL. For details see LICENSE file.
+ */
+
++#include <sys/types.h>
+ #include <stdio.h>
+ #include <errno.h>
+ #include <fcntl.h>
+@@ -585,6 +586,10 @@
+ #ifdef DEBUG
+ printf("ascpu: system(%s)\n",Command);
+ #endif
++ if (setgid(getgid()) != 0)
++ err(1, "Can't drop setgid privileges");
++ if (setuid(getuid()) != 0)
++ err(1, "Can't drop setuid privileges");
+ system( Command );
+ }
+ break;