27e4cacf97
- CVE-2011-4339 OpenIPMI Resolves: rhbz#1382983
26 lines
583 B
Diff
26 lines
583 B
Diff
From 152efd46931a70ab4e3d81e99d312df7dcd666e6 Mon Sep 17 00:00:00 2001
|
|
From: Boris Ranto <branto@redhat.com>
|
|
Date: Tue, 10 May 2016 19:12:08 +0200
|
|
Subject: [PATCH] CVE-2011-4339 OpenIPMI
|
|
|
|
IPMI event daemon creates PID file with world writeable permissions
|
|
---
|
|
lib/helper.c | 1 -
|
|
1 file changed, 1 deletion(-)
|
|
|
|
diff --git a/lib/helper.c b/lib/helper.c
|
|
index de91438..c3a1c80 100644
|
|
--- a/lib/helper.c
|
|
+++ b/lib/helper.c
|
|
@@ -829,7 +829,6 @@ ipmi_start_daemon(struct ipmi_intf *intf)
|
|
#endif
|
|
|
|
chdir("/");
|
|
- umask(0);
|
|
|
|
for (fd=0; fd<64; fd++) {
|
|
if (fd != intf->fd)
|
|
--
|
|
2.7.4
|
|
|