From 87410983f33a7be844b4a3f14584e3d6e32876c8 Mon Sep 17 00:00:00 2001 From: raster Date: Wed, 7 Mar 2012 09:05:47 +0000 Subject: [PATCH] to be paranoid - ensure umask for mkstemp allows no other uids oir grps access. git-svn-id: svn+ssh://svn.enlightenment.org/var/svn/e/trunk/evas@68910 7cbeb6ba-43b4-40fd-8cce-4c39aea84d33 --- src/lib/canvas/evas_object_image.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/lib/canvas/evas_object_image.c b/src/lib/canvas/evas_object_image.c index 4ebea08..4ec8c2e 100644 --- a/src/lib/canvas/evas_object_image.c +++ b/src/lib/canvas/evas_object_image.c @@ -224,8 +224,10 @@ _create_tmpf(Evas_Object *obj, void *data, int size, char *format __UNUSED__) char buf[4096]; void *dst; int fd = -1; + mode_t pmode; o = (Evas_Object_Image *)(obj->object_data); + pmode = umask(S_IRGRP | S_IWGRP | S_IXGRP | S_IROTH | S_IWOTH | S_IXOTH); #ifdef __linux__ snprintf(buf, sizeof(buf), "/dev/shm/.evas-tmpf-%i-%p-%i-XXXXXX", (int)getpid(), data, (int)size); @@ -237,6 +239,7 @@ _create_tmpf(Evas_Object *obj, void *data, int size, char *format __UNUSED__) (int)getpid(), data, (int)size); fd = mkstemp(buf); } + umask(pmode); if (fd < 0) return; if (ftruncate(fd, size) < 0) { -- 2.7.4