summaryrefslogtreecommitdiffstats
path: root/usr.sbin
diff options
context:
space:
mode:
authordelphij <delphij@FreeBSD.org>2015-04-07 20:20:24 +0000
committerdelphij <delphij@FreeBSD.org>2015-04-07 20:20:24 +0000
commite5ee1c2b414851b17663cb491e2f2317a0af9bda (patch)
tree0fb07d612e2cdc3639727807b31799e6a7842bd4 /usr.sbin
parent788993fc41f2549c7ca282a9e1bc3ca4dd88596e (diff)
downloadFreeBSD-src-e5ee1c2b414851b17663cb491e2f2317a0af9bda.zip
FreeBSD-src-e5ee1c2b414851b17663cb491e2f2317a0af9bda.tar.gz
Improve patch for SA-15:04.igmp to solve a potential buffer overflow.
Fix multiple vulnerabilities of ntp. [SA-15:07] Fix bsdinstall(8) insecure default GELI keyfile permissions. [SA-15:08] Fix Denial of Service with IPv6 Router Advertisements. [SA-15:09]
Diffstat (limited to 'usr.sbin')
-rwxr-xr-xusr.sbin/bsdinstall/scripts/zfsboot3
1 files changed, 3 insertions, 0 deletions
diff --git a/usr.sbin/bsdinstall/scripts/zfsboot b/usr.sbin/bsdinstall/scripts/zfsboot
index 1f4bd4e..9f41d7f 100755
--- a/usr.sbin/bsdinstall/scripts/zfsboot
+++ b/usr.sbin/bsdinstall/scripts/zfsboot
@@ -1125,6 +1125,9 @@ zfs_create_boot()
f_eval_catch $funcname dd "$DD_WITH_OPTIONS" \
/dev/random "$bootpool/$zroot_key" \
"bs=4096 count=1" || return $FAILURE
+ f_eval_catch $funcname chmod "$CHMOD_MODE" \
+ go-wrx "$bootpool/$zroot_key" ||
+ return $FAILURE
else
# Clean up
f_eval_catch $funcname zfs "$ZFS_UNMOUNT" \
OpenPOWER on IntegriCloud