28 lines
1010 B
Diff
28 lines
1010 B
Diff
From 0db98910a11c12a454eac4c8e86dc7a7bbc764a4 Mon Sep 17 00:00:00 2001
|
|
From: Andreas Stieger <astieger@suse.com>
|
|
Date: Mon, 7 Nov 2016 10:37:22 +0100
|
|
Subject: [PATCH] dracut.sh: create the initramfs non-world readable also if
|
|
early cpio is used
|
|
|
|
Fixes: 5f2c30d9bcd614d546d5c55c6897e33f88b9ab90
|
|
Previously fixed CVE-2012-4453: e1b48995c26c4f06d1a718539cb1bd5b0179af91
|
|
|
|
Signed-off-by: Andreas Stieger <astieger@suse.com>
|
|
---
|
|
dracut.sh | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/dracut.sh b/dracut.sh
|
|
index 40ca08f..2d79bbc 100755
|
|
--- a/dracut.sh
|
|
+++ b/dracut.sh
|
|
@@ -1700,7 +1700,7 @@ if [[ $create_early_cpio = yes ]]; then
|
|
|
|
# The microcode blob is _before_ the initramfs blob, not after
|
|
if ! (
|
|
- cd "$early_cpio_dir/d"
|
|
+ umask 077; cd "$early_cpio_dir/d"
|
|
find . -print0 | sort -z \
|
|
| cpio ${CPIO_REPRODUCIBLE:+--reproducible} --null $cpio_owner_root -H newc -o --quiet > "${DRACUT_TMPDIR}/initramfs.img"
|
|
); then
|