diff options
| author | eadler <eadler@FreeBSD.org> | 2012-10-22 03:07:05 +0000 |
|---|---|---|
| committer | eadler <eadler@FreeBSD.org> | 2012-10-22 03:07:05 +0000 |
| commit | a603c87b0251c5b6077c28864b1aeb21c40f4086 (patch) | |
| tree | 90ec7fe4bf0dae506d699603babb4917082f098a /usr.bin/lock | |
| parent | b55c76b1b0ad13886a22eb6abb2363bb324bc7cb (diff) | |
| download | FreeBSD-src-a603c87b0251c5b6077c28864b1aeb21c40f4086.zip FreeBSD-src-a603c87b0251c5b6077c28864b1aeb21c40f4086.tar.gz | |
Check the return error of set[e][ug]id. While this can never fail in the
current version of FreeBSD, this isn't guarenteed by the API.
Custom security modules, or future implementations of the setuid and
setgid may fail.
Submitted by: Erik Cederstrand
Approved by: cperciva
MFC after: 3 days
Diffstat (limited to 'usr.bin/lock')
| -rw-r--r-- | usr.bin/lock/lock.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/usr.bin/lock/lock.c b/usr.bin/lock/lock.c index 0382e83..acc0e29 100644 --- a/usr.bin/lock/lock.c +++ b/usr.bin/lock/lock.c @@ -129,7 +129,9 @@ main(int argc, char **argv) } timeout.tv_sec = sectimeout * 60; - setuid(getuid()); /* discard privs */ + /* discard privs */ + if (setuid(getuid()) != 0) + errx(1, "setuid failed"); if (tcgetattr(0, &tty)) /* get information for header */ exit(1); |
