From 0646c68b02a10401e28277ed38f77b7f9abadc93 Mon Sep 17 00:00:00 2001 From: dima Date: Thu, 26 Aug 1999 17:32:48 +0000 Subject: Don't follow symlinks on coredumps. Reviewed by: dillon && security-officer --- sys/kern/imgact_aout.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'sys/kern/imgact_aout.c') diff --git a/sys/kern/imgact_aout.c b/sys/kern/imgact_aout.c index 3da5f99..df983de 100644 --- a/sys/kern/imgact_aout.c +++ b/sys/kern/imgact_aout.c @@ -23,7 +23,7 @@ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * - * $Id: imgact_aout.c,v 1.51 1999/05/14 23:09:00 alc Exp $ + * $Id: imgact_aout.c,v 1.52 1999/05/17 00:53:36 alc Exp $ */ #include @@ -264,8 +264,8 @@ aout_coredump(p) name = expand_name(p->p_comm, p->p_ucred->cr_uid, p->p_pid); if (name == NULL) return (EFAULT); /* XXX -- not the best error */ - NDINIT(&nd, LOOKUP, FOLLOW, UIO_SYSSPACE, name, p); - error = vn_open(&nd, O_CREAT | FWRITE, S_IRUSR | S_IWUSR); + NDINIT(&nd, LOOKUP, NOFOLLOW, UIO_SYSSPACE, name, p); + error = vn_open(&nd, O_CREAT | FWRITE | O_NOFOLLOW, S_IRUSR | S_IWUSR); free(name, M_TEMP); if (error) return (error); -- cgit v1.1