Add security patch from the FreeBSD ports collection:

Drop setgid kmem privs before executing external programs.

  Reported by:    Christer Oberg <christer.oberg@gmx.net>
Bump the package revision to 3.
This commit is contained in:
tron 2002-09-18 10:40:12 +00:00
parent 0098eba49c
commit 6fc1051e41
3 changed files with 13 additions and 5 deletions

View file

@ -1,7 +1,7 @@
# $NetBSD: Makefile,v 1.6 2001/11/29 01:12:44 hubertf Exp $
# $NetBSD: Makefile,v 1.7 2002/09/18 10:40:12 tron Exp $
DISTNAME= wmnet-1.06
PKGREVISION= 2
PKGREVISION= 3
CATEGORIES= net x11
MASTER_SITES= http://www.digitalkaos.net/linux/wmnet/download/

View file

@ -1,10 +1,10 @@
$NetBSD: distinfo,v 1.4 2002/07/18 12:57:56 seb Exp $
$NetBSD: distinfo,v 1.5 2002/09/18 10:40:12 tron Exp $
SHA1 (wmnet-1.06.tar.gz) = 978364e0ab45c71730c196334e8fced4ac0a7853
Size (wmnet-1.06.tar.gz) = 27506 bytes
SHA1 (patch-aa) = d999f66818c05f2f9a58571abc0e548bb2938a4b
SHA1 (patch-ab) = 2c2fbc065a49bc27dd42660dda23393e02269714
SHA1 (patch-ac) = f8793a06cdf4ffd9e852dd802054734a566edb30
SHA1 (patch-ad) = 7a420d0dcef977549ba35a1046a0e5509a0c3643
SHA1 (patch-ad) = f66a39da4381feca668bde9bd5768c2e214868f6
SHA1 (patch-ae) = 09d413422b0074c29da7c8a9c271d9ddb2be04fb
SHA1 (patch-af) = 70c0917b465acf778b6b744bef587bc8e41e49fb

View file

@ -1,4 +1,4 @@
$NetBSD: patch-ad,v 1.3 2002/07/18 12:57:58 seb Exp $
$NetBSD: patch-ad,v 1.4 2002/09/18 10:40:13 tron Exp $
--- wmnet.c.orig Fri May 5 03:01:14 2000
+++ wmnet.c Mon Jul 8 16:52:30 2002
@ -181,3 +181,11 @@ $NetBSD: patch-ad,v 1.3 2002/07/18 12:57:58 seb Exp $
XFillRectangle(dpy, *visible_window, graphics_context, 4, 5, 37, 9);
}
if (rate < .1) {
@@ -732,6 +732,7 @@
case ButtonPress:
if(event.xbutton.button == Button1 && click_command != NULL) {
if (fork() == 0) {
+ setgid(getgid());
execl("/bin/sh", "sh", "-c", click_command, NULL);
perror("wmnet: execl()");
exit(15);