Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Put back issetugid() check for hostaliases.

Browse Source 
XXX: this is suboptimal, It would be better if we propelry checked
for access.
This commit is contained in:
christos 2004-09-25 05:33:01 +00:00
parent 281037afd6
commit f42653853a
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
lib/libc/resolv/res_query.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: res_query.c,v 1.5 2004/05/21 16:03:05 christos Exp $ */
/* $NetBSD: res_query.c,v 1.6 2004/09/25 05:33:01 christos Exp $ */
/*
* Copyright (c) 1988, 1993
@ -76,7 +76,7 @@
static const char sccsid[] = "@(#)res_query.c 8.1 (Berkeley) 6/4/93";
static const char rcsid[] = "Id: res_query.c,v 1.2.2.3.4.2 2004/03/16 12:34:19 marka Exp";
#else
__RCSID("$NetBSD: res_query.c,v 1.5 2004/05/21 16:03:05 christos Exp $");
__RCSID("$NetBSD: res_query.c,v 1.6 2004/09/25 05:33:01 christos Exp $");
#endif
#endif /* LIBC_SCCS and not lint */
@ -94,6 +94,7 @@ __RCSID("$NetBSD: res_query.c,v 1.5 2004/05/21 16:03:05 christos Exp $");
#include <resolv.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>
#include "port_after.h"
@ -419,6 +420,12 @@ res_hostalias(const res_state statp, const char *name, char *dst, size_t siz) {
if (statp->options & RES_NOALIASES)
return (NULL);
/*
* forbid hostaliases for setuid binary, due to possible security
* breach.
*/
if (issetugid())
return (NULL);
file = getenv("HOSTALIASES");
if (file == NULL || (fp = fopen(file, "r")) == NULL)
return (NULL);