OpenBSD / xenocara / hsvKPzN / chown before chmod

OpenBSD/xenocara hsvKPzN — app/xenodm/config TakeConsole

2017-10-04 18:28:59 UTC by matthieu on ⎇

HEAD

🏷

OPENBSD_6_3_BASE

   chown before chmod

   This prevents a malicious user logging out from calling
   chmod while still owning /dev/console and thus by-passing
   the '622' mode that is set here.

   Issue reported by Tim Chase. Thanks.


   Merged from xdm upstreams

Version	Delta		File
1.2	+2	-2	app/xenodm/config/TakeConsole
	+2	-2	1 files

Unified Split Raw