libprelude/master: Make the profile permission respect required ownership.

[email protected] Wed, 8 Jul 2009 16:51:56 +0200 (CEST)
Newsgroups gmane.comp.security.ids.prelude.cvs
Message-ID <[email protected]>
commit fc16f0a86a4655e8835d47699d40244a6b635233
Author: Yoann Vandoorselaere <[email protected]>
Date:   Wed Jun 17 15:41:38 2009 +0200

    Make the profile permission respect required ownership.
    
    The analyzerid file within the prelude-admin created profile would be
    created with default ownership, without following --uid / --gid option
    requirement. Thanks to Pierre Chifflier <[email protected]> for
    pointing this out.


========================================

 prelude-admin/prelude-admin.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

========================================

diff --git a/prelude-admin/prelude-admin.c b/prelude-admin/prelude-admin.c
index 10683f4..073cfe2 100644
--- a/prelude-admin/prelude-admin.c
+++ b/prelude-admin/prelude-admin.c
@@ -801,6 +801,10 @@ static int register_sensor_ident(const char *name, uint64_t *ident)
                 return 0;
         }
 
+        ret = fchown(fileno(fd), prelude_client_profile_get_uid(profile), prelude_client_profile_get_gid(profile));
+        if ( ret < 0 )
+                fprintf(stderr, "error changing '%s' ownership: %s.\n", filename, strerror(errno));
+
         fprintf(fd, "%" PRELUDE_PRIu64 "\n", *ident);
         fclose(fd);
 
_______________________________________________
Prelude-cvslog site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-cvslog