Skip to content
Permalink
Browse files Browse the repository at this point in the history
a-a-i-d-t-a-cache: sanitize umask
We cannot trust anything when running suided program.

Related: #1216962

Signed-off-by: Jakub Filak <jfilak@redhat.com>
  • Loading branch information
Jakub Filak committed May 4, 2015
1 parent 9943a77 commit 9a41006
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions src/plugins/abrt-action-install-debuginfo-to-abrt-cache.c
Expand Up @@ -182,6 +182,9 @@ int main(int argc, char **argv)
if (u != 0)
strcpy(path_env, "PATH=/usr/bin:/bin:"BIN_DIR);
putenv(path_env);

/* Use safe umask */
umask(0022);
}

execvp(EXECUTABLE, (char **)args);
Expand Down

0 comments on commit 9a41006

Please sign in to comment.