opendoas

commit ef627e6d9df4eac6de11de4bcf4669823a424ad4
parent 7c364fd80021864ff69cf01e130eebeb734ea6f5
Author: Duncaen <mail@duncano.de>
Date:   Tue, 12 Dec 2017 02:17:09 +0100

persist_timestamp: don't allow og+rwx permission for timestamp directory

Diffstat:
M
persist_timestamp.c
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/persist_timestamp.c b/persist_timestamp.c
@@ -147,7 +147,7 @@ check:
 
 	if ((st.st_mode & S_IFMT) != S_IFDIR)
 		errx(1, "timestamp directory is not a directory");
-	if ((st.st_mode & (S_IWGRP|S_IRGRP|S_IWOTH|S_IROTH)) != 0)
+	if ((st.st_mode & (S_IWGRP|S_IRGRP|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH)) != 0)
 		errx(1, "timestamp directory permissions wrong");
 	if (st.st_uid != 0 || st.st_gid != 0)
 		errx(1, "timestamp directory is not owned by root");