Add a patch that fixes the vulnerability.

Submitted by:	ade
This commit is contained in:
Vanilla I. Shu 2000-09-23 08:21:22 +00:00
parent 9c21047709
commit 2700c8dfe4
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=33034

View File

@ -1,23 +1,22 @@
--- esd.c.orig Tue Apr 4 11:20:08 2000
+++ esd.c Thu Jun 29 23:34:18 2000
@@ -219,12 +219,12 @@
--- esd.c.orig Tue Apr 4 23:20:08 2000
+++ esd.c Sat Sep 23 16:13:26 2000
@@ -218,13 +218,9 @@
if (access(ESD_UNIX_SOCKET_DIR, R_OK | W_OK) == -1)
{
mkdir(ESD_UNIX_SOCKET_DIR,
S_IRUSR|S_IWUSR|S_IXUSR|
- S_IRUSR|S_IWUSR|S_IXUSR|
- S_IRGRP|S_IWGRP|S_IXGRP|
- S_IROTH|S_IWOTH|S_IXOTH);
+ S_IRGRP|S_IXGRP|
+ S_IROTH|S_IXOTH);
+ S_IRUSR|S_IWUSR|S_IXUSR);
chmod(ESD_UNIX_SOCKET_DIR,
S_IRUSR|S_IWUSR|S_IXUSR|
- S_IRUSR|S_IWUSR|S_IXUSR|
- S_IRGRP|S_IWGRP|S_IXGRP|
- S_IROTH|S_IWOTH|S_IXOTH);
+ S_IRGRP|S_IXGRP|
+ S_IROTH|S_IXOTH);
+ S_IRUSR|S_IWUSR|S_IXUSR);
}
if (access(ESD_UNIX_SOCKET_NAME, R_OK | W_OK) == -1)
{
@@ -317,9 +317,9 @@
@@ -317,9 +313,9 @@
/* let anyone access esd's socket - but we have authentication so they */
/* wont get far if they dont have the auth key */
chmod(ESD_UNIX_SOCKET_NAME,