summaryrefslogtreecommitdiffstats
path: root/games
diff options
context:
space:
mode:
authoreivind <eivind@FreeBSD.org>1997-02-23 03:29:36 +0000
committereivind <eivind@FreeBSD.org>1997-02-23 03:29:36 +0000
commit9b98797d2988c73c3264b3c18a8268a7168be61b (patch)
treedebc3789ae84410cbd1a48a42efcf48895929832 /games
parent374ff5ff08a60888d0667a306e2a68abb168a370 (diff)
downloadFreeBSD-src-9b98797d2988c73c3264b3c18a8268a7168be61b.zip
FreeBSD-src-9b98797d2988c73c3264b3c18a8268a7168be61b.tar.gz
Add setuid() before running the pager - from the code audit.
Submitted by: Mark Huizer <xaa@stack.nl>
Diffstat (limited to 'games')
-rw-r--r--games/cribbage/instr.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/games/cribbage/instr.c b/games/cribbage/instr.c
index a0414d8..5df7dae 100644
--- a/games/cribbage/instr.c
+++ b/games/cribbage/instr.c
@@ -74,6 +74,10 @@ instructions()
if (pager = rindex(path, '/'))
++pager;
pager = path;
+ if (setuid(getuid()) < 0) {
+ (void)fprintf(stderr, "cribbage: unable to setuid\n");
+ _exit(1);
+ }
execlp(path, pager, _PATH_INSTR, (char *)NULL);
(void)fprintf(stderr, "cribbage: %s.\n", strerror(errno));
_exit(1);
OpenPOWER on IntegriCloud