projects / gentoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cc98a55) | patch
net-misc/bopm: fix security bug with pid file.
authorRaymond Jennings <shentino@gmail.com>
Thu, 12 Oct 2017 06:50:58 +0000 (23:50 -0700)
committerPatrice Clement <monsieurp@gentoo.org>
Sun, 15 Oct 2017 21:11:03 +0000 (23:11 +0200)
commitb268b306966b45a54da8a5573e09915e0ca92a96
tree49d7663e1d1ba7dd98e4625cf56bc40136237ce6tree | snapshot
parentcc98a552cb4a23436e90d8f1fbdb6f233e0de43fcommit | diff
net-misc/bopm: fix security bug with pid file.

In theory, someone who explots a hacked bopm could then use it to
attack root owned processes.

This puts the bopm-written PID file into a disposable junk directory
and lets start-stop-daemon do all the grunt work.

Bug: https://bugs.gentoo.org/631882
Closes: https://github.com/gentoo/gentoo/pull/5924
net-misc/bopm/bopm-3.1.3-r4.ebuild [moved from net-misc/bopm/bopm-3.1.3-r3.ebuild with 93% similarity] diff | blob | history
net-misc/bopm/files/bopm-3.1.3-quarantine-bad-pid-file.patch [new file with mode: 0644] blob
net-misc/bopm/files/bopm.init.d-r2 [moved from net-misc/bopm/files/bopm.init.d-r1 with 70% similarity] diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.