Drop setgid kmem privs before executing external programs.
Reported by: Christer Oberg <christer.oberg@gmx.net>
This commit is contained in:
parent
7d998c2c5c
commit
4695eaef2e
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=51870
@ -7,6 +7,7 @@
|
||||
|
||||
PORTNAME= wmnet2
|
||||
PORTVERSION= 1.06
|
||||
PORTREVISION= 1
|
||||
CATEGORIES= net
|
||||
MASTER_SITES= http://www.digitalkaos.net/linux/wmnet/download/
|
||||
DISTNAME= wmnet-${PORTVERSION}
|
||||
|
10
net/wmnet2/files/patch-ac
Normal file
10
net/wmnet2/files/patch-ac
Normal file
@ -0,0 +1,10 @@
|
||||
--- wmnet.c.orig Thu May 4 21:01:14 2000
|
||||
+++ wmnet.c Wed Dec 19 17:43:40 2001
|
||||
@@ -732,6 +732,7 @@
|
||||
case ButtonPress:
|
||||
if(event.xbutton.button == Button1 && click_command != NULL) {
|
||||
if (fork() == 0) {
|
||||
+ setgid(getgid());
|
||||
execl("/bin/sh", "sh", "-c", click_command, NULL);
|
||||
perror("wmnet: execl()");
|
||||
exit(15);
|
Loading…
Reference in New Issue
Block a user