From 35fe31aceb8221fd8bd8ea8d48d1bb4f0fbdf837 Mon Sep 17 00:00:00 2001 From: Jakub Filak Date: Wed, 29 Apr 2015 14:13:57 +0200 Subject: [PATCH] a-a-i-d-t-a-cache: sanitize umask We cannot trust anything when running suided program. Related: #1216962 Signed-off-by: Jakub Filak --- src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c b/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c index 4fa1783..81b1486 100644 --- a/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c +++ b/src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c @@ -199,6 +199,9 @@ int main(int argc, char **argv) if (euid != 0) strcpy(path_env, "PATH=/usr/bin:/bin:"BIN_DIR); putenv(path_env); + + /* Use safe umask */ + umask(0022); } execvp(EXECUTABLE, (char **)args); -- 2.1.0