d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

For non-root uids, consider root-owned files also 'secure' unless otherwise

Browse Source 
disqualified.
This commit is contained in:
David Nugent 1997-05-15 06:06:32 +00:00
parent 3ef626ecd5
commit cfd94da5e2
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=25829
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/libutil/_secure_path.3
View File

@ -17,7 +17,7 @@
.\" 5. Modifications may be freely made to this file providing the above
.\" conditions are met.
.\"
.\" $Id$
.\" $Id: _secure_path.3,v 1.1 1997/05/10 18:55:37 davidn Exp $
.\"
.Dd May 2, 1997
.Os FreeBSD
@ -46,7 +46,7 @@ special or named pipe, etc.),
.It
Is not world writable.
.It
Is owned by the given uid, if uid is not -1,
Is owned by the given uid or uid 0, if uid is not -1,
.It
Is not group wriable or it has group ownership by the given
gid, if gid is not -1.

4
lib/libutil/_secure_path.c
View File

@ -18,7 +18,7 @@
* 5. Modifications may be freely made to this file providing the above
* conditions are met.
*
* $Id$
* $Id: _secure_path.c,v 1.1 1997/05/10 18:55:37 davidn Exp $
*/
@ -57,7 +57,7 @@ _secure_path(const char *path, uid_t uid, gid_t gid)
msg = "%s: %s is not a regular file";
else if (sb.st_mode & S_IWOTH)
msg = "%s: %s is world writable";
else if (uid != -1 && sb.st_uid != uid) {
else if (uid != -1 && sb.st_uid != uid && sb.st_uid != 0) {
if (uid == 0)
msg = "%s: %s is not owned by root";
else