From 146f09ed6cf0eb6142468db1c17043ffbbb6b4c0 Mon Sep 17 00:00:00 2001 From: William Hubbs Date: Thu, 19 Feb 2015 12:44:21 -0600 Subject: [PATCH] checkpath: do not chown or chmod symbolic links This is another security fix. If you use chown() or chmod() on a symbolic link, it affects the referenced file, not the symbolic link itself. X-Gentoo-Bug: 540006 X-Gentoo-Bug-URL: https://bugs.gentoo.org/show_bug.cgi?id=540006 --- src/rc/checkpath.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/rc/checkpath.c b/src/rc/checkpath.c index 4e36242..0713246 100644 --- a/src/rc/checkpath.c +++ b/src/rc/checkpath.c @@ -137,6 +137,10 @@ static int do_check(char *path, uid_t uid, gid_t gid, mode_t mode, eerror("%s: chmod: %s %s", applet, "Too many hard links to", path); return -1; } + if ((type != inode_dir) && (S_ISLNK(st.st_mode))) { + eerror("%s: chmod: %s %s", applet, path, " is a symbolic link"); + return -1; + } einfo("%s: correcting mode", path); if (chmod(path, mode)) { eerror("%s: chmod: %s", applet, strerror(errno)); @@ -149,6 +153,10 @@ static int do_check(char *path, uid_t uid, gid_t gid, mode_t mode, eerror("%s: chown: %s %s", applet, "Too many hard links to", path); return -1; } + if ((type != inode_dir) && (S_ISLNK(st.st_mode))) { + eerror("%s: chown: %s %s", applet, path, " is a symbolic link"); + return -1; + } einfo("%s: correcting owner", path); if (chown(path, uid, gid)) { eerror("%s: chown: %s", applet, strerror(errno)); -- 2.0.5