Ian Kent 36276e
autofs-5.1.4 - fix flag file permission
Ian Kent 36276e
Ian Kent 36276e
From: Ian Kent <raven@themaw.net>
Ian Kent 36276e
Ian Kent 36276e
The flag file used to check if automount(8) is running was being
Ian Kent 36276e
created with mode 0 which caused unnecessary dac_override AVC
Ian Kent 36276e
failures.
Ian Kent 36276e
Ian Kent 36276e
There's no reason to protect this file so just use 0644 as the
Ian Kent 36276e
file permission.
Ian Kent 36276e
Ian Kent 36276e
Signed-off-by: Ian Kent <raven@themaw.net>
Ian Kent 36276e
---
Ian Kent 36276e
 CHANGELOG     |    3 +++
Ian Kent 36276e
 daemon/flag.c |    2 +-
Ian Kent 36276e
 2 files changed, 4 insertions(+), 1 deletion(-)
Ian Kent 36276e
Ian Kent 36276e
diff --git a/CHANGELOG b/CHANGELOG
Ian Kent 36276e
index 246279ae..d07d88ce 100644
Ian Kent 36276e
--- a/CHANGELOG
Ian Kent 36276e
+++ b/CHANGELOG
Ian Kent 36276e
@@ -1,3 +1,6 @@
Ian Kent 36276e
+xx/xx/2018 autofs-5.1.5
Ian Kent 36276e
+- fix flag file permission.
Ian Kent 36276e
+
Ian Kent 36276e
 19/12/2017 autofs-5.1.4
Ian Kent 36276e
 - fix spec file url.
Ian Kent 36276e
 - fix unset tsd group name handling.
Ian Kent 36276e
diff --git a/daemon/flag.c b/daemon/flag.c
Ian Kent 36276e
index 99f26847..ff9858c8 100644
Ian Kent 36276e
--- a/daemon/flag.c
Ian Kent 36276e
+++ b/daemon/flag.c
Ian Kent 36276e
@@ -164,7 +164,7 @@ int aquire_flag_file(void)
Ian Kent 36276e
 	while (!we_created_flagfile) {
Ian Kent 36276e
 		int errsv, i, j;
Ian Kent 36276e
 
Ian Kent 36276e
-		i = open_fd_mode(linkf, O_WRONLY|O_CREAT, 0);
Ian Kent 36276e
+		i = open_fd_mode(linkf, O_WRONLY|O_CREAT, 0644);
Ian Kent 36276e
 		if (i < 0) {
Ian Kent 36276e
 			release_flag_file();
Ian Kent 36276e
 			return 0;