[multipathd] /var/run/multipathd.sock is world-writable

Due to an stray 'umask()' the socket file is in fact world-writable,
allowing for an easy exploit.

References: 458598

diff --git a/multipathd/main.c b/multipathd/main.c
index 8a1a63d..9957f1f 100644 (file)
--- a/multipathd/main.c
+++ b/multipathd/main.c
@@ -1454,8 +1454,9 @@ daemonize(void)
 
        close(in_fd);
        close(out_fd);
-       chdir("/");
-       umask(0);
+       if (chdir("/") < 0)
+               fprintf(stderr, "cannot chdir to '/', continuing\n");
+
        return 0;
 }