Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
Please login to access the resource
openSUSE:Evergreen:11.4
gdm.import4636
gdm-CVE-2011-0727-bnc679786.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File gdm-CVE-2011-0727-bnc679786.patch of Package gdm.import4636
From c122ebed451272090e594f3a511cc8a6017a62e2 Mon Sep 17 00:00:00 2001 From: Ray Strode <rstrode@redhat.com> Date: Thu, 24 Mar 2011 16:47:37 -0400 Subject: [PATCH] worker: CVE-2011-0727: change to user before copying user files This commit changes to a user before copying user files to prevent a possible symlink local root exploit attack. --- daemon/gdm-session-worker.c | 29 +++++++++++++++++------------ 1 files changed, 17 insertions(+), 12 deletions(-) diff --git a/daemon/gdm-session-worker.c b/daemon/gdm-session-worker.c index 35a6bfe..7c5b0b5 100644 --- a/daemon/gdm-session-worker.c +++ b/daemon/gdm-session-worker.c @@ -1035,17 +1035,6 @@ gdm_cache_copy_file (GdmSessionWorker *worker, error->message); g_error_free (error); } else { - int res; - - res = chown (cachefilename, - worker->priv->uid, - worker->priv->gid); - if (res == -1) { - g_warning ("GdmSessionWorker: Error setting owner of cache file: %s", - g_strerror (errno)); - } - - g_chmod (cachefilename, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH); g_debug ("Copy successful"); } @@ -1183,7 +1172,23 @@ gdm_session_worker_uninitialize_pam (GdmSessionWorker *worker, return; if (worker->priv->state >= GDM_SESSION_WORKER_STATE_SESSION_OPENED) { - gdm_session_worker_cache_userfiles (worker); + pid_t pid; + + pid = fork (); + + if (pid == 0) { + if (setuid (worker->priv->uid) < 0) { + g_debug ("GdmSessionWorker: could not reset uid: %s", g_strerror (errno)); + _exit (1); + } + + gdm_session_worker_cache_userfiles (worker); + _exit (0); + } + + if (pid > 0) { + gdm_wait_on_pid (pid); + } pam_close_session (worker->priv->pam_handle, 0); gdm_session_auditor_report_logout (worker->priv->auditor); -- 1.7.1
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor