From 012351c00a0b366bbf052222306cf939e9471db1 Mon Sep 17 00:00:00 2001 From: Zac Medico Date: Tue, 13 Dec 2016 09:07:46 -0800 Subject: [PATCH] net-misc/peervpn: 0.044-r1 revbump for bug 602550 Fix the openrc init script start_post function to use the chown --no-dereference option in order to prevent privilege escalation attacks. X-Gentoo-bug: 602550 X-Gentoo-bug-url: https://bugs.gentoo.org/show_bug.cgi?id=602550 Package-Manager: portage-2.3.3 --- net-misc/peervpn/files/peervpn.initd | 4 +++- .../peervpn/{peervpn-0.044.ebuild => peervpn-0.044-r1.ebuild} | 0 2 files changed, 3 insertions(+), 1 deletion(-) rename net-misc/peervpn/{peervpn-0.044.ebuild => peervpn-0.044-r1.ebuild} (100%) diff --git a/net-misc/peervpn/files/peervpn.initd b/net-misc/peervpn/files/peervpn.initd index 3174dc67f683..0f891b322218 100644 --- a/net-misc/peervpn/files/peervpn.initd +++ b/net-misc/peervpn/files/peervpn.initd @@ -27,5 +27,7 @@ start_pre() { } start_post() { - chown "${user}":"${group}" "${logfile}" + # Use --no-dereference to prevent privilege escalation + # attacks. Fixes bug #602550. + chown --no-dereference "${user}":"${group}" "${logfile}" } diff --git a/net-misc/peervpn/peervpn-0.044.ebuild b/net-misc/peervpn/peervpn-0.044-r1.ebuild similarity index 100% rename from net-misc/peervpn/peervpn-0.044.ebuild rename to net-misc/peervpn/peervpn-0.044-r1.ebuild -- 2.26.2