Blame SOURCES/0183-abrtd-switch-owner-of-the-dump-location-to-root.patch
|
 |
baab13 |
From 57bc5697db222c96cb3adbee635f072abeeff6ad Mon Sep 17 00:00:00 2001
|
|
|
baab13 |
From: Jakub Filak <jfilak@redhat.com>
|
|
|
baab13 |
Date: Wed, 30 Sep 2015 14:14:31 +0200
|
|
|
baab13 |
Subject: [PATCH] abrtd: switch owner of the dump location to 'root'
|
|
|
baab13 |
|
|
|
baab13 |
Additional hardening suggested by Florian Weimer <fweimer@redhat.com>
|
|
|
baab13 |
|
|
|
baab13 |
Related to CVE-2015-5287
|
|
|
baab13 |
Related: #1262252
|
|
|
baab13 |
|
|
|
baab13 |
Signed-off-by: Jakub Filak <jfilak@redhat.com>
|
|
|
baab13 |
---
|
|
|
baab13 |
src/daemon/abrtd.c | 2 +-
|
|
|
baab13 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
baab13 |
|
|
|
baab13 |
diff --git a/src/daemon/abrtd.c b/src/daemon/abrtd.c
|
|
|
baab13 |
index b1252d2..b79e940 100644
|
|
|
baab13 |
--- a/src/daemon/abrtd.c
|
|
|
baab13 |
+++ b/src/daemon/abrtd.c
|
|
|
baab13 |
@@ -164,7 +164,7 @@ static void sanitize_dump_dir_rights(void)
|
|
|
baab13 |
* us with thousands of bogus or malicious dumps */
|
|
|
baab13 |
/* 07000 bits are setuid, setgit, and sticky, and they must be unset */
|
|
|
baab13 |
/* 00777 bits are usual "rwxrwxrwx" access rights */
|
|
|
baab13 |
- ensure_writable_dir(g_settings_dump_location, 0755, "abrt");
|
|
|
baab13 |
+ ensure_writable_dir_group(g_settings_dump_location, 0751, "root", "abrt");
|
|
|
baab13 |
/* temp dir */
|
|
|
baab13 |
ensure_writable_dir(VAR_RUN"/abrt", 0755, "root");
|
|
|
baab13 |
}
|
|
|
baab13 |
--
|
|
|
baab13 |
1.8.3.1
|
|
|
baab13 |
|