提交 9a1df62d 编写于 作者: A asaha

Merge

......@@ -723,6 +723,8 @@ fb157d537278cda4150740e27bb57cd8694e15bf jdk8u60-b24
6b4ea38c01bd9cc86d0aa8926f4855ff6ee365ee jdk8u60-b25
6a6759372807f49aa7a66ddc36aa91d6648d2097 jdk8u60-b26
10ad4b9d79f98fa3545c88a342a68a80d198b808 jdk8u60-b27
1f646daf0d673b0925da1ed7809d6bd097388ece jdk8u60-b31
9bf9a733246b5e89986233f42a8e00c798ca703f jdk8u60-b32
0219ab69f00782e5c49687e2fa75138a7ffddea1 jdk8u52-b06
9b6f44853eed8caba935915c7e710c546b205c8e jdk8u52-b07
0219ab69f00782e5c49687e2fa75138a7ffddea1 jdk8u65-b00
......
......@@ -217,9 +217,9 @@ static bool is_statbuf_secure(struct stat *statp) {
//
return false;
}
// See if the uid of the directory matches the effective uid of the process.
//
if (statp->st_uid != geteuid()) {
// If user is not root then see if the uid of the directory matches the effective uid of the process.
uid_t euid = geteuid();
if ((euid != 0) && (statp->st_uid != euid)) {
// The directory was not created by this user, declare it insecure.
//
return false;
......
......@@ -219,9 +219,9 @@ static bool is_statbuf_secure(struct stat *statp) {
//
return false;
}
// See if the uid of the directory matches the effective uid of the process.
//
if (statp->st_uid != geteuid()) {
// If user is not root then see if the uid of the directory matches the effective uid of the process.
uid_t euid = geteuid();
if ((euid != 0) && (statp->st_uid != euid)) {
// The directory was not created by this user, declare it insecure.
//
return false;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册