ipmitool/0001-CVE-2011-4339-OpenIPMI.patch
Boris Ranto 39b15aa909 New version (0:1.8.17-1)
- CVE-2011-4339 OpenIPMI
2016-05-10 19:13:48 +02:00

26 lines
583 B
Diff

From 25d443a25e3c1254e531a9cf1b3ceb39bb1674ca Mon Sep 17 00:00:00 2001
From: Boris Ranto <branto@redhat.com>
Date: Tue, 10 May 2016 19:12:08 +0200
Subject: [PATCH] CVE-2011-4339 OpenIPMI
IPMI event daemon creates PID file with world writeable permissions
---
lib/helper.c | 1 -
1 file changed, 1 deletion(-)
diff --git a/lib/helper.c b/lib/helper.c
index 022a9c9..e570759 100644
--- a/lib/helper.c
+++ b/lib/helper.c
@@ -664,7 +664,6 @@ ipmi_start_daemon(struct ipmi_intf *intf)
#endif
chdir("/");
- umask(0);
for (fd=0; fd<64; fd++) {
if (fd != intf->fd)
--
2.5.5