Fix rev 1.12.
/tmp may not be writeable yet when dhclient is first run via /etc/rc.d/netif so using it may not work. Also, writing to a predictable file in /tmp as root is a really bad idea since a malicious user may be able to win a race and insert a symlink which will allow them to cause any file to be overwritten. To solve these problems, create the tempory file in /var/run which will exist this early and is writable only by root. Security: Local risk if users can cause dhclient to run on demand (such as by unplugging and replugging the network cable).
This commit is contained in:
parent
169c44907a
commit
f1bacaa501
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=154869
@ -135,7 +135,7 @@ add_new_resolv_conf() {
|
||||
# thus broke the script. This code creates the resolv.conf if either
|
||||
# are provided.
|
||||
|
||||
local tmpres=${TMPDIR:-/tmp}/resolv.conf.std
|
||||
local tmpres=/var/run/resolv.conf.${interface}
|
||||
rm -f $tmpres
|
||||
|
||||
if [ -n "$new_domain_name" ]; then
|
||||
|
Loading…
Reference in New Issue
Block a user