Make qrexec_daemon socket accessible.
Set restructive umask after socket creation.
This commit is contained in:
parent
b899bfc9ba
commit
bb0507c89a
@ -72,7 +72,6 @@ void init(int xid)
|
|||||||
"/var/log/qubes/qrexec.%d.log", xid);
|
"/var/log/qubes/qrexec.%d.log", xid);
|
||||||
umask(0007);
|
umask(0007);
|
||||||
logfd = open(dbg_log, O_WRONLY | O_CREAT | O_TRUNC, 0640);
|
logfd = open(dbg_log, O_WRONLY | O_CREAT | O_TRUNC, 0640);
|
||||||
umask(0077);
|
|
||||||
dup2(logfd, 1);
|
dup2(logfd, 1);
|
||||||
dup2(logfd, 2);
|
dup2(logfd, 2);
|
||||||
|
|
||||||
@ -82,7 +81,9 @@ void init(int xid)
|
|||||||
exit(1);
|
exit(1);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
umask(0);
|
||||||
server_fd = get_server_socket(xid);
|
server_fd = get_server_socket(xid);
|
||||||
|
umask(0077);
|
||||||
peer_client_init(xid, REXEC_PORT);
|
peer_client_init(xid, REXEC_PORT);
|
||||||
setuid(getuid());
|
setuid(getuid());
|
||||||
signal(SIGPIPE, SIG_IGN);
|
signal(SIGPIPE, SIG_IGN);
|
||||||
|
Loading…
Reference in New Issue
Block a user