Instead of swapping ruid and euid before and after touching user's file,
simply drop the privilege right after the program is started. Thanks to bde for giving me good suggestion about this problem.
This commit is contained in:
parent
93f303ace3
commit
10c4031d64
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=22191
@ -104,6 +104,11 @@ char **argv;
|
||||
register int l; /* non-descript index */
|
||||
register char c; /* non-descript character storage */
|
||||
long t; /* time for random num generator */
|
||||
uid_t uid;
|
||||
|
||||
/*Drop the privilege.*/
|
||||
uid = getuid();
|
||||
setreuid (uid,uid);
|
||||
|
||||
/* initialization */
|
||||
bflag = 2; /* default no board */
|
||||
|
@ -87,7 +87,6 @@ register int n;
|
||||
writec (*fs++);
|
||||
}
|
||||
*fs = '\0';
|
||||
setreuid(geteuid(), getuid());
|
||||
if ((fdesc = open(fname,2)) == -1 && errno == 2) {
|
||||
if ((fdesc = creat (fname,0700)) != -1)
|
||||
break;
|
||||
@ -130,7 +129,6 @@ register int n;
|
||||
write (fdesc,&gvalue,sizeof gvalue);
|
||||
write (fdesc,&raflag,sizeof raflag);
|
||||
close (fdesc);
|
||||
setreuid(geteuid(), getuid());
|
||||
if (tflag)
|
||||
curmove (18,0);
|
||||
writel (saved);
|
||||
@ -150,7 +148,6 @@ char *s;
|
||||
register int i;
|
||||
int fdesc;
|
||||
|
||||
setreuid(geteuid(), getuid());
|
||||
if ((fdesc = open (s,0)) == -1)
|
||||
norec (s);
|
||||
read (fdesc,board,sizeof board);
|
||||
@ -165,7 +162,6 @@ char *s;
|
||||
read (fdesc,&gvalue,sizeof gvalue);
|
||||
read (fdesc,&raflag,sizeof raflag);
|
||||
close (fdesc);
|
||||
setreuid(geteuid(), getuid());
|
||||
rflag = 1;
|
||||
}
|
||||
|
||||
|
@ -42,6 +42,8 @@ static char sccsid[] = "@(#)teach.c 8.1 (Berkeley) 5/31/93";
|
||||
#endif /* not lint */
|
||||
|
||||
#include <string.h>
|
||||
#include <sys/types.h>
|
||||
#include <unistd.h>
|
||||
#include "back.h"
|
||||
|
||||
char *hello[];
|
||||
@ -78,6 +80,11 @@ char **argv;
|
||||
|
||||
{
|
||||
register int i;
|
||||
uid_t uid;
|
||||
|
||||
/*Drop the privilege.*/
|
||||
uid = getuid();
|
||||
setreuid (uid,uid);
|
||||
|
||||
acnt = 1;
|
||||
signal (2,getout);
|
||||
|
Loading…
Reference in New Issue
Block a user