d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revoke properly by setgid, not by setuid, overlooked in games

Browse Source 
uid->gid change
This commit is contained in:
Andrey A. Chernov 1997-09-24 21:29:58 +00:00
parent 554cf12897
commit 9ea04b5811
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
games/atc/input.c
View File

@ -47,6 +47,8 @@
static char sccsid[] = "@(#)input.c 8.1 (Berkeley) 5/31/93";
#endif not lint
#include <stdlib.h>
#include <string.h>
#include "include.h"
#include "pathnames.h"
@ -319,9 +321,10 @@ gettoken()
#endif
if (fork() == 0) /* child */
{
char *shell, *base, *getenv(), *strrchr();
char *shell, *base;
setuid(getuid()); /* turn off setuid bit */
/* revoke */
setgid(getgid());
done_screen();
/* run user's favorite shell */