Drop setgid kmem privs before executing external programs.

Reported by:	Christer Oberg <christer.oberg@gmx.net>
This commit is contained in:
Chris D. Faulhaber 2001-12-19 22:45:28 +00:00
parent 7d998c2c5c
commit 4695eaef2e
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=51870
2 changed files with 11 additions and 0 deletions

View File

@ -7,6 +7,7 @@
PORTNAME= wmnet2
PORTVERSION= 1.06
PORTREVISION= 1
CATEGORIES= net
MASTER_SITES= http://www.digitalkaos.net/linux/wmnet/download/
DISTNAME= wmnet-${PORTVERSION}

10
net/wmnet2/files/patch-ac Normal file
View File

@ -0,0 +1,10 @@
--- wmnet.c.orig Thu May 4 21:01:14 2000
+++ wmnet.c Wed Dec 19 17:43:40 2001
@@ -732,6 +732,7 @@
case ButtonPress:
if(event.xbutton.button == Button1 && click_command != NULL) {
if (fork() == 0) {
+ setgid(getgid());
execl("/bin/sh", "sh", "-c", click_command, NULL);
perror("wmnet: execl()");
exit(15);