deepblue/ipmitool
1
0
Fork 0
mirror of https://github.com/ipmitool/ipmitool.git synced 2025-05-10 18:47:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixes CVE-2011-4339 - world writeable PID file

Browse Source 
Adds proper umask() before writing PID file.
This commit is contained in:
Zdenek Styblik 2012-01-24 13:26:56 +00:00
parent b6d2f7e302
commit 5ed7f6ac0a
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ipmitool/src/ipmievd.c
View File

@ -746,6 +746,7 @@ ipmievd_main(struct ipmi_event_intf * eintf, int argc, char ** argv)
}
}
umask(022);
fp = ipmi_open_file_write(pidfile);
if (fp != NULL) {
fprintf(fp, "%d\n", (int)getpid());