search

FirebirdSQL / firebird

Firebird server, client and tools
https://www.firebirdsql.org/
1.22k stars 213 forks source link

fbguard lock file created world-writable [CORE4595] #4910

Open firebird-automations opened 9 years ago

firebird-automations commented 9 years ago

Submitted by: Damyan Ivanov (dam)

Attachments: fb_guard-lock-permissions.patch

Votes: 1

fbguard creates its lock file with 0666 mode and 0000 mask, resulting in a file that is accessible and writable by all users of the system.

Commits: FirebirdSQL/firebird@0d96ed587b1332bb9aaaac6d88ade66197012242 FirebirdSQL/firebird@a8b476f85e68aebaed8a61521bbb6d47ba8b8c2f FirebirdSQL/fbt-repository@0c1f12f91554156589ced67c4eda97f71d1ec6b3 FirebirdSQL/fbt-repository@8a3f0ed427b72676079e24e3fb3bc32b65fbd5c1

firebird-automations commented 9 years ago

Commented by: Damyan Ivanov (dam)

Here's a patch that tightens the permissions of the created fbguard lock file.

firebird-automations commented 9 years ago
Modified by: Damyan Ivanov (dam) Attachment: fb\_guard\-lock\-permissions\.patch \[ 12607 \]
firebird-automations commented 9 years ago

Commented by: @mariuz

Patched in B2_5_Release and in trunk