Date: Tue, 10 Nov 2009 00:52:22 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-releng@freebsd.org Subject: svn commit: r199124 - releng/8.0/usr.sbin/crashinfo Message-ID: <200911100052.nAA0qMI2040540@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Tue Nov 10 00:52:22 2009 New Revision: 199124 URL: http://svn.freebsd.org/changeset/base/199124 Log: MFC r198846 (MF8 r199121): Set umask to 0x077 instead of the default. This prevents non-root user from reading crashinfo output, which could contain some sensitive information. Approved by: re (kensmith) Modified: releng/8.0/usr.sbin/crashinfo/crashinfo.sh Directory Properties: releng/8.0/usr.sbin/crashinfo/ (props changed) Modified: releng/8.0/usr.sbin/crashinfo/crashinfo.sh ============================================================================== --- releng/8.0/usr.sbin/crashinfo/crashinfo.sh Tue Nov 10 00:48:24 2009 (r199123) +++ releng/8.0/usr.sbin/crashinfo/crashinfo.sh Tue Nov 10 00:52:22 2009 (r199124) @@ -147,6 +147,8 @@ fi echo "Writing crash summary to $FILE." +umask 077 + # Simulate uname ostype=$(echo -e printf '"%s", ostype' | gdb -x /dev/stdin -batch $KERNEL) osrelease=$(echo -e printf '"%s", osrelease' | gdb -x /dev/stdin -batch $KERNEL)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200911100052.nAA0qMI2040540>