1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-05 22:43:24 +00:00
freebsd-ports/sysutils/ascpu/files/patch-sec01
Kris Kennaway f3ea91ef96 Drop privileges before executing user commands
Submitted by:	jedgar
2000-01-30 02:19:34 +00:00

22 lines
548 B
Plaintext

--- ascpu_x.c.orig Thu Dec 16 17:45:26 1999
+++ ascpu_x.c Wed Dec 29 20:47:32 1999
@@ -6,6 +6,7 @@
* This software is distributed under GPL. For details see LICENSE file.
*/
+#include <sys/types.h>
#include <stdio.h>
#include <errno.h>
#include <fcntl.h>
@@ -585,6 +586,10 @@
#ifdef DEBUG
printf("ascpu: system(%s)\n",Command);
#endif
+ if (setgid(getgid()) != 0)
+ err(1, "Can't drop setgid privileges");
+ if (setuid(getuid()) != 0)
+ err(1, "Can't drop setuid privileges");
system( Command );
}
break;