mirrors/xrdp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Set permissions on pcsc socket dir to owner only

Browse Source 
There is no reason for any user other than the current one to be able
to communicate with the remote smartcard.
This commit is contained in:
matt335672 2022-12-09 11:55:31 +00:00
parent e05d223462
commit 89c873e4aa
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sesman/chansrv/smartcard_pcsc.c
View File

@ -1874,7 +1874,9 @@ scard_pcsc_init(void)
}
}
}
g_chmod_hex(g_pcsclite_ipc_dir, 0x1777);
/* Only the current user should be able to access the remote
* smartcard */
g_chmod_hex(g_pcsclite_ipc_dir, 0x700);
g_snprintf(g_pcsclite_ipc_file, 255, "%s/pcscd.comm", g_pcsclite_ipc_dir);
g_lis->trans_conn_in = my_pcsc_trans_conn_in;
error = trans_listen(g_lis, g_pcsclite_ipc_file);