packages: multipath-tools/493400_multipathd_umask_fix.patch (NEW) - CVE-200...

[glen]

Author: glen                         Date: Thu Jun 11 21:33:24 2009 GMT
Module: packages                      Tag: HEAD
---- Log message:
- CVE-2009-0115 fix from redhat

---- Files affected:
packages/multipath-tools:
   493400_multipathd_umask_fix.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: packages/multipath-tools/493400_multipathd_umask_fix.patch
diff -u /dev/null packages/multipath-tools/493400_multipathd_umask_fix.patch:1.1
--- /dev/null	Thu Jun 11 23:33:24 2009
+++ packages/multipath-tools/493400_multipathd_umask_fix.patch	Thu Jun 11 23:33:19 2009
@@ -0,0 +1,18 @@
+--- multipath-tools/multipathd/main.c	2009-04-01 14:47:15.000000000 -0400
++++ multipath-tools/multipathd/main.c	2009-04-01 15:22:43.000000000 -0400
+@@ -1186,6 +1186,7 @@
+ 	add_handler(DISABLEQ+MAP, cli_disable_queueing);
+ 	add_handler(RESTOREQ+MAP, cli_restore_queueing);
+ 
++	umask(077);
+ 	uxsock_listen(&uxsock_trigger, ap);
+ 
+ 	return NULL;
+@@ -1759,7 +1760,6 @@
+ 	close(in_fd);
+ 	close(out_fd);
+ 	chdir("/");
+-	umask(0);
+ 	return 0;
+ }
+ 
================================================================