[patch] ddclient-reasonable-security.patch

ddclient-reasonable-security.patch (text/plain), 883 bytes, created by Paul Bredbury on 2006-04-11 12:49:50 UTC

--- /usr/sbin/ddclient-orig	2006-04-11 10:14:16.000000000 +0100
+++ /usr/sbin/ddclient	2006-04-11 20:31:14.000000000 +0100
@@ -776,15 +776,10 @@
 	# fatal("Cannot open file '%s'. ($!)", $file);
 	warning("Cannot open file '%s'. ($!)", $file);
     }
-    # Check for only owner has any access to config file
+    # Guard against world-readability of config file
     my ($dev, $ino, $mode, @statrest) = stat(FD);
-    if ($mode & 077) {                          
-	if (-f FD && (chmod 0600, $file)) {
-	    warning("file $file must be accessible only by its owner (fixed).");
-	} else {
-	    # fatal("file $file must be accessible only by its owner.");
-	    warning("file $file must be accessible only by its owner.");
-	}
+    if ($mode & 007) {
+		fatal("Must not be world-accessible\nchange its permissions using e.g.\nchmod 640", $file);
     }
 
     local $lineno       = 0;