projects / platform / upstream / multipath-tools.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 15d4bdd) | patch
[multipathd] /var/run/multipathd.sock is world-writable
authorHannes Reinecke <hare@suse.de>
Wed, 1 Apr 2009 20:31:01 +0000 (22:31 +0200)
committerChristophe Varoqui <christophe.varoqui@free.fr>
Wed, 1 Apr 2009 20:31:01 +0000 (22:31 +0200)
commit0a0319d381249760c71023edbe0ac9c093bb4a74
tree69d3f1b1188c0146db25d97c48876aed5843c674tree | snapshot
parent15d4bdddcb9b71e0ec6fecc3c37a1b8cae8f51ffcommit | diff
[multipathd] /var/run/multipathd.sock is world-writable

Due to an stray 'umask()' the socket file is in fact world-writable,
allowing for an easy exploit.

References: 458598
multipathd/main.c diff | blob | history
Domain: System / Base;