File multipath-tools-remove-stray-umask-call of Package multipath-tools
commit 9b5bed512937cb95382a0d3200a2f1964a759a79
Author: Hannes Reinecke <hare@suse.de>
Date: Mon Feb 23 09:26:27 2009 +0100
/var/run/multipathd.sock is world-writable
Due to an stray 'umask()' the socket file is in fact world-writable,
allowing for an easy exploit.
References: 458598
Signed-off-by: Hannes Reinecke <hare@suse.de>
diff --git a/multipathd/main.c b/multipathd/main.c
index d2a31c2..7c995b6 100644
--- a/multipathd/main.c
+++ b/multipathd/main.c
@@ -1513,7 +1513,6 @@ daemonize(void)
if (chdir("/") < 0)
fprintf(stderr, "cannot chdir to '/', continuing\n");
- umask(0);
return 0;
}