From 91f04ebcefcd873f9dc58014157991dd8534986b Mon Sep 17 00:00:00 2001 From: Daniel Hokka Zakrisson Date: Sat, 25 Nov 2006 19:17:51 +0000 Subject: [PATCH] Use chroot-sh chmod to remove the symlink attack vector. git-svn-id: http://svn.linux-vserver.org/svn/util-vserver/trunk@2406 94cd875c-1c1d-0410-91d2-eb244daf1a30 --- distrib/redhat/initpost | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/distrib/redhat/initpost b/distrib/redhat/initpost index 81ca09f..4157a2b 100755 --- a/distrib/redhat/initpost +++ b/distrib/redhat/initpost @@ -92,14 +92,12 @@ pushd "$vdir" &>/dev/null exec /sbin/killall5 -15 EOF - # TODO: remove race/symlink-attack - chmod +x etc/init.d/halt + $_CHROOT_SH chmod 0755 /etc/init.d/halt : | $_CHROOT_SH truncate /etc/sysctl.conf echo "none / none defaults" | $_CHROOT_SH truncate /etc/fstab cat "$__DISTRIBDIR"/redhat/rc.sysinit | $_CHROOT_SH truncate /etc/rc.d/rc.sysinit.vserver - # TODO: remove race/symlink-attack - chmod +x etc/rc.d/rc.sysinit.vserver + $_CHROOT_SH chmod 0755 /etc/rc.d/rc.sysinit.vserver subst etc/inittab 's!^\([^#].*:respawn:.* tty\)!#\1!; s!si::sysinit:/etc/rc.d/rc.sysinit!si::sysinit:/etc/rc.d/rc.sysinit.vserver!' popd >/dev/null -- 1.8.1.5