diff options
| -rw-r--r-- | device-mapper-multipath.spec | 7 | ||||
| -rw-r--r-- | fix_umask.patch | 17 |
2 files changed, 23 insertions, 1 deletions
diff --git a/device-mapper-multipath.spec b/device-mapper-multipath.spec index 50643ef..a09516b 100644 --- a/device-mapper-multipath.spec +++ b/device-mapper-multipath.spec @@ -1,7 +1,7 @@ Summary: Tools to manage multipath devices using device-mapper Name: device-mapper-multipath Version: 0.4.8 -Release: 8%{?dist} +Release: 9%{?dist} License: GPL+ Group: System Environment/Base URL: http://christophe.varoqui.free.fr/ @@ -20,6 +20,7 @@ Patch10: fix_devt.patch Patch11: directio_message_cleanup.patch Patch12: binding_error.patch Patch13: fix_kpartx.patch +Patch14: fix_umask.patch Requires: kpartx = %{version}-%{release} BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires(post): chkconfig @@ -60,6 +61,7 @@ kpartx manages partition creation and removal for device-mapper devices. %patch11 -p1 -b .directio_message %patch12 -p1 -b .binding_error %patch13 -p1 -b .ext_part +%patch14 -p1 -b .umask %build make %{?_smp_mflags} DESTDIR=$RPM_BUILD_ROOT @@ -111,6 +113,9 @@ fi %{_mandir}/man8/kpartx.8.gz %changelog +* Thu Apr 7 2009 Milan Broz <mbroz@redhat.com> - 0.4.8-9 +- Fix insecure permissions on multipathd.sock (CVE-2009-0115) + * Sun Mar 22 2009 Milan Broz <mbroz@redhat.com> - 0.4.8-8 - Fix kpartx extended partition handling (481297) diff --git a/fix_umask.patch b/fix_umask.patch new file mode 100644 index 0000000..035fb9e --- /dev/null +++ b/fix_umask.patch @@ -0,0 +1,17 @@ +--- multipath-tools.old/multipathd/main.c 2009-04-02 12:22:37.000000000 +0200 ++++ multipath-tools/multipathd/main.c 2009-04-02 12:25:13.000000000 +0200 +@@ -718,6 +718,7 @@ uxlsnrloop (void * ap) + set_handler_callback(REINSTATE+PATH, cli_reinstate); + set_handler_callback(FAIL+PATH, cli_fail); + ++ umask(077); + uxsock_listen(&uxsock_trigger, ap); + + return NULL; +@@ -1436,7 +1437,6 @@ daemonize(void) + close(in_fd); + close(out_fd); + chdir("/"); +- umask(0); + return 0; + } |