libcgroup: fix CVE-2018-14348

This commit is contained in:
maxice8 2018-10-16 11:49:43 -03:00 committed by maxice8
parent 8edd33c574
commit 1acd35357c
2 changed files with 14 additions and 2 deletions

View File

@ -0,0 +1,12 @@
--- src/daemon/cgrulesengd.c
+++ src/daemon/cgrulesengd.c
@@ -889,9 +889,6 @@
} else if (pid > 0) {
exit(EXIT_SUCCESS);
}
-
- /* Change the file mode mask. */
- umask(0);
} else {
flog(LOG_DEBUG, "Not using daemon mode\n");
pid = getpid();<Paste>

View File

@ -1,7 +1,7 @@
# Template file for 'libcgroup'
pkgname=libcgroup
version=0.41
revision=7
revision=8
build_style=gnu-configure
configure_args="--sbindir=/usr/bin --enable-pam-module-dir=/usr/lib/security"
hostmakedepends="flex automake libtool"
@ -10,7 +10,7 @@ short_desc="Library that abstracts the control group file system in Linux"
maintainer="Juan RP <xtraeme@voidlinux.eu>"
license="LGPL-2.1"
homepage="http://libcg.sourceforge.net"
distfiles="${SOURCEFORGE_SITE}/libcg/$pkgname-$version.tar.bz2"
distfiles="${SOURCEFORGE_SITE}/libcg/${pkgname}-${version}.tar.bz2"
checksum=e4e38bdc7ef70645ce33740ddcca051248d56b53283c0dc6d404e17706f6fb51
case "$XBPS_TARGET_MACHINE" in