Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Discard setgid privileges if not reading the running kernel as suggested 

by Mike Grupenhoff <ashmir@umiacs.umd.edu> in PR #2485.
This commit is contained in:
thorpej 1996-06-07 01:36:39 +00:00
parent cb237a9633
commit 2a295146f3
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
usr.bin/w/w.c
View File

@ -1,3 +1,5 @@
/* $NetBSD: w.c,v 1.18 1996/06/07 01:36:39 thorpej Exp $ */
/*-
* Copyright (c) 1980, 1991, 1993, 1994
* The Regents of the University of California. All rights reserved.
@ -38,7 +40,11 @@ static char copyright[] =
#endif /* not lint */
#ifndef lint
#if 0
static char sccsid[] = "@(#)w.c 8.4 (Berkeley) 4/16/94";
#else
static char rcsid[] = "$NetBSD: w.c,v 1.18 1996/06/07 01:36:39 thorpej Exp $";
#endif
#endif /* not lint */
/*
@ -166,6 +172,13 @@ main(argc, argv)
argc -= optind;
argv += optind;
/*
* Discard setgid privelidges if not the running kernel so that
* bad guys can't print interesting stuff from kernel memory.
*/
if (nlistf != NULL || memf != NULL)
setgid(getgid());
if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, errbuf)) == NULL)
errx(1, "%s", errbuf);