Changed permissions for semafore reading

This commit is contained in:
Michiel Broek 2005-03-14 22:32:38 +00:00
parent 5d4359200e
commit 5f564c380e
3 changed files with 14 additions and 2 deletions

View File

@ -32,6 +32,10 @@ v0.71.2 16-Jan-2005
More patches added from Dmitry Komissaroff to improve charset More patches added from Dmitry Komissaroff to improve charset
support. Also improved msgid linking. support. Also improved msgid linking.
mbtask:
The created semafore files are now world readable so that low
privileged users like nobody can check the semafore's.
html: html:
Added batch file upload written by Russell Tiedt to the faq. Added batch file upload written by Russell Tiedt to the faq.

View File

@ -98,7 +98,7 @@ install:
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/ftp/pub @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/ftp/pub
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/ftp/pub/local @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/ftp/pub/local
@${INSTALL} -d -o ${ROWNER} -g ${RGROUP} -m 0750 ${PREFIX}/ftp/incoming @${INSTALL} -d -o ${ROWNER} -g ${RGROUP} -m 0750 ${PREFIX}/ftp/incoming
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/var
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/arealists @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/arealists
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/badtic @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/badtic
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/boxes @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/boxes
@ -130,9 +130,11 @@ install:
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/queue @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/queue
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/rules @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/rules
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/run @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0770 ${PREFIX}/var/run
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0777 ${PREFIX}/var/sema @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0775 ${PREFIX}/var/sema
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/ticqueue @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/ticqueue
@${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/unknown @${INSTALL} -d -o ${OWNER} -g ${GROUP} -m 0750 ${PREFIX}/var/unknown
@chmod 0775 ${PREFIX}/var
@chmod 0775 ${PREFIX}/var/sema
@if [ -x ${BINDIR}/mbtelnetd ]; then \ @if [ -x ${BINDIR}/mbtelnetd ]; then \
rm ${BINDIR}/mbtelnetd ; \ rm ${BINDIR}/mbtelnetd ; \
echo "removed ${BINDIR}/mbtelnetd"; \ echo "removed ${BINDIR}/mbtelnetd"; \

View File

@ -268,14 +268,17 @@ void CreateSema(char *sem)
{ {
char temp[PATH_MAX]; char temp[PATH_MAX];
FILE *fp; FILE *fp;
int oldmask;
sprintf(temp, "%s/var/sema/%s", getenv("MBSE_ROOT"), sem); sprintf(temp, "%s/var/sema/%s", getenv("MBSE_ROOT"), sem);
if (access(temp, F_OK) == 0) if (access(temp, F_OK) == 0)
return; return;
oldmask = umask(002);
if ((fp = fopen(temp, "w"))) if ((fp = fopen(temp, "w")))
fclose(fp); fclose(fp);
else else
Syslog('?', "Can't create semafore %s", temp); Syslog('?', "Can't create semafore %s", temp);
umask(oldmask);
} }
@ -284,12 +287,15 @@ void TouchSema(char *sem)
{ {
char temp[PATH_MAX]; char temp[PATH_MAX];
FILE *fp; FILE *fp;
int oldmask;
sprintf(temp, "%s/var/sema/%s", getenv("MBSE_ROOT"), sem); sprintf(temp, "%s/var/sema/%s", getenv("MBSE_ROOT"), sem);
oldmask = umask(002);
if ((fp = fopen(temp, "w"))) if ((fp = fopen(temp, "w")))
fclose(fp); fclose(fp);
else else
Syslog('?', "Can't touch semafore %s", temp); Syslog('?', "Can't touch semafore %s", temp);
umask(oldmask);
} }