extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-14 11:44:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

Avoid local exploitability with compile output file -- Take 2

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3255 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-07 23:00:13 +00:00
parent cfe0e4ee7b
commit cc7f84cea9
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Shorewall/firewall
View File

@ -8823,7 +8823,7 @@ define_firewall() # $1 = Command (Start or Restart)
# #
compile_firewall() # $1 = File Name compile_firewall() # $1 = File Name
{ {
file=$1 dir=$(dirname $1) outfile=$1 dir=$(dirname $1)
# #
# We overload a number of functions when compiling. # We overload a number of functions when compiling.
# #
@ -8904,20 +8904,20 @@ compile_firewall() # $1 = File Name
# #
# END OVERLOADED FUNCTIONS # END OVERLOADED FUNCTIONS
# #
case $file in case $outfile in
*/*) */*)
[ -d $dir ] || startup_error "Directory $dir does not exist" [ -d $dir ] || startup_error "Directory $dir does not exist"
[ -h $dir ] && startup_error "$dir is a Symbolic Link" [ -h $dir ] && startup_error "$dir is a Symbolic Link"
[ -d $file ] && startup_error "$file is a Directory" [ -d $outfile ] && startup_error "$outfile is a Directory"
[ -h $file ] && startup_error "$file is a Symbolic Link" [ -h $outfile ] && startup_error "$outfile is a Symbolic Link"
;; ;;
*) *)
file=/var/lib/shorewall/$1 outfile=/var/lib/shorewall/$1
;; ;;
esac esac
[ -f $file -a ! -x $file ] && startup_error "$file exists and is not a restore file" [ -f $outfile -a ! -x $outfile ] && startup_error "$outfile exists and is not a restore file"
verify_os_version verify_os_version
verify_ip verify_ip
@ -9045,7 +9045,7 @@ compile_firewall() # $1 = File Name
run_user_exit started run_user_exit started
mv -f $RESTOREBASE $file mv -f $RESTOREBASE $outfile
chmod 700 $file chmod 700 $file