d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Instead of swapping ruid and euid before and after touching user's file,

Browse Source 
simply drop the privilege right after the program is started.
Thanks to bde for giving me good suggestion about this problem.
This commit is contained in:
Masafumi Max NAKANE 1997-02-01 21:30:50 +00:00
parent 93f303ace3
commit 10c4031d64
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=22191
3 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
games/backgammon/backgammon/main.c
View File

@ -104,6 +104,11 @@ char **argv;
register int l; /* non-descript index */
register char c; /* non-descript character storage */
long t; /* time for random num generator */
uid_t uid;
/*Drop the privilege.*/
uid = getuid();
setreuid (uid,uid);
/* initialization */
bflag = 2; /* default no board */

4
games/backgammon/common_source/save.c
View File

@ -87,7 +87,6 @@ register int n;
writec (*fs++);
}
*fs = '\0';
setreuid(geteuid(), getuid());
if ((fdesc = open(fname,2)) == -1 && errno == 2) {
if ((fdesc = creat (fname,0700)) != -1)
break;
@ -130,7 +129,6 @@ register int n;
write (fdesc,&gvalue,sizeof gvalue);
write (fdesc,&raflag,sizeof raflag);
close (fdesc);
setreuid(geteuid(), getuid());
if (tflag)
curmove (18,0);
writel (saved);
@ -150,7 +148,6 @@ char *s;
register int i;
int fdesc;
setreuid(geteuid(), getuid());
if ((fdesc = open (s,0)) == -1)
norec (s);
read (fdesc,board,sizeof board);
@ -165,7 +162,6 @@ char *s;
read (fdesc,&gvalue,sizeof gvalue);
read (fdesc,&raflag,sizeof raflag);
close (fdesc);
setreuid(geteuid(), getuid());
rflag = 1;
}

7
games/backgammon/teachgammon/teach.c
View File

@ -42,6 +42,8 @@ static char sccsid[] = "@(#)teach.c 8.1 (Berkeley) 5/31/93";
#endif /* not lint */
#include <string.h>
#include <sys/types.h>
#include <unistd.h>
#include "back.h"
char *hello[];
@ -78,6 +80,11 @@ char **argv;
{
register int i;
uid_t uid;
/*Drop the privilege.*/
uid = getuid();
setreuid (uid,uid);
acnt = 1;
signal (2,getout);