From 5bdffe382c3a3fd242aca5625983713da6d6d00d Mon Sep 17 00:00:00 2001 From: Dirk Meyer Date: Wed, 27 Oct 2004 04:34:53 +0000 Subject: [PATCH] - Security Fix privillege esaclation to write as user ifmail Submitted by: Niels Heinen, Jacques A Vidrine --- news/ifmail/Makefile | 2 +- news/ifmail/files/patch-rdconfig.c | 36 ++++++++++++++++++++++++++++++ 2 files changed, 37 insertions(+), 1 deletion(-) create mode 100644 news/ifmail/files/patch-rdconfig.c diff --git a/news/ifmail/Makefile b/news/ifmail/Makefile index 0a16197b3610..79fabf97c369 100644 --- a/news/ifmail/Makefile +++ b/news/ifmail/Makefile @@ -7,7 +7,7 @@ PORTNAME= ifmail PORTVERSION= 2.15 -PORTREVISION= 4 +PORTREVISION= 5 CATEGORIES= news MASTER_SITES= ${MASTER_SITE_SUNSITE} MASTER_SITE_SUBDIR= system/fido diff --git a/news/ifmail/files/patch-rdconfig.c b/news/ifmail/files/patch-rdconfig.c new file mode 100644 index 000000000000..0783ba7906b4 --- /dev/null +++ b/news/ifmail/files/patch-rdconfig.c @@ -0,0 +1,36 @@ +*** iflib/rdconfig.c.orig Tue Oct 19 11:27:29 2004 +--- iflib/rdconfig.c Tue Oct 19 11:29:47 2004 +*************** +*** 5,10 **** +--- 5,11 ---- + #include + #include + #include ++ #include + #include "xutil.h" + #include "lutil.h" + #include "ftn.h" +*************** +*** 402,409 **** + verbose=setverbose(arg); + break; + +! case 'I': configname=arg; +! break; + + default: return 1; /* unrecognized option */ + +--- 403,415 ---- + verbose=setverbose(arg); + break; + +! case 'I': +! if (issetugid()) +! fprintf(stderr, +! "readconfig: -I option ignored while running as set-user-ID\n"); +! else +! configname=arg; +! break; + + default: return 1; /* unrecognized option */ +