Instead of swapping ruid and euid before and after touching user's file,

simply drop the privilege right after the program is started.
Thanks to bde for giving me good suggestion about this problem.
This commit is contained in:
max 1997-02-01 21:30:50 +00:00
parent e254d33903
commit b0c88e4d21
3 changed files with 12 additions and 4 deletions

View File

@ -104,6 +104,11 @@ char **argv;
register int l; /* non-descript index */
register char c; /* non-descript character storage */
long t; /* time for random num generator */
uid_t uid;
/*Drop the privilege.*/
uid = getuid();
setreuid (uid,uid);
/* initialization */
bflag = 2; /* default no board */

View File

@ -87,7 +87,6 @@ register int n;
writec (*fs++);
}
*fs = '\0';
setreuid(geteuid(), getuid());
if ((fdesc = open(fname,2)) == -1 && errno == 2) {
if ((fdesc = creat (fname,0700)) != -1)
break;
@ -130,7 +129,6 @@ register int n;
write (fdesc,&gvalue,sizeof gvalue);
write (fdesc,&raflag,sizeof raflag);
close (fdesc);
setreuid(geteuid(), getuid());
if (tflag)
curmove (18,0);
writel (saved);
@ -150,7 +148,6 @@ char *s;
register int i;
int fdesc;
setreuid(geteuid(), getuid());
if ((fdesc = open (s,0)) == -1)
norec (s);
read (fdesc,board,sizeof board);
@ -165,7 +162,6 @@ char *s;
read (fdesc,&gvalue,sizeof gvalue);
read (fdesc,&raflag,sizeof raflag);
close (fdesc);
setreuid(geteuid(), getuid());
rflag = 1;
}

View File

@ -42,6 +42,8 @@ static char sccsid[] = "@(#)teach.c 8.1 (Berkeley) 5/31/93";
#endif /* not lint */
#include <string.h>
#include <sys/types.h>
#include <unistd.h>
#include "back.h"
char *hello[];
@ -78,6 +80,11 @@ char **argv;
{
register int i;
uid_t uid;
/*Drop the privilege.*/
uid = getuid();
setreuid (uid,uid);
acnt = 1;
signal (2,getout);