[patch] /usr/portage/sys-process/vixie-cron/files/vixie-cron-4.1-chksyscrontab.patch

vixie-cron-4.1-chksyscrontab.patch (text/plain), 785 bytes, created by Xavier Neys (RETIRED) on 2007-03-10 10:53:53 UTC

--- crontab.c.orig	2007-03-10 11:30:45.000000000 +0100
+++ crontab.c	2007-03-10 11:43:38.000000000 +0100
@@ -121,6 +121,7 @@
 static void
 parse_args(int argc, char *argv[]) {
 	int argch;
+	char resolved_path[PATH_MAX];
 
 	if (!(pw = getpwuid(getuid()))) {
 		fprintf(stderr, "%s: your UID isn't in the passwd file.\n",
@@ -202,7 +203,11 @@
 		 */
 		if (!strcmp(Filename, "-"))
 			NewCrontab = stdin;
-		else {
+		else if (realpath(Filename, resolved_path) != NULL &&
+		    !strcmp(resolved_path, SYSCRONTAB)) {
+			fprintf(stderr, SYSCRONTAB " must be edited manually\n");
+			exit(ERROR_EXIT);
+		} else {
 			/* relinquish the setuid status of the binary during
 			 * the open, lest nonroot users read files they should
 			 * not be able to read.  we can't use access() here