1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-01 22:05:08 +00:00
freebsd-ports/editors/joe2/files/patch-ad
Kris Kennaway 8ab60d4a84 Close a security hole relating to a world-readable DEADJOE file.
PR:	12827
Submitted by:	Maintainer
1999-08-30 00:18:45 +00:00

19 lines
502 B
Plaintext

--- b.c Fri Jan 20 03:38:25 1995
+++ b.c.new Fri Jul 23 03:36:10 1999
@@ -21,6 +21,7 @@
#include <pwd.h>
#endif
#include <errno.h>
+#include <sys/types.h>
#include "config.h"
#include "blocks.h"
@@ -1990,6 +1991,7 @@
{
long tim=time(0);
B *b;
+ mode_t mask=umask(077); /* no access to DEADJOE for others */
FILE *f=fopen("DEADJOE","a");
fprintf(f,"\n*** Modified files in JOE when it aborted on %s",ctime(&tim));
if(sig) fprintf(f,"*** JOE was aborted by signal %d\n",sig);