diff options
| author |   bluhm <bluhm@openbsd.org> | 2015-10-15 19:30:03 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2015-10-15 19:30:03 +0000 |
| commit | d2efe23825fe8bb84d6d754226a6134669f76c28 (patch) | |
| tree | bd5c8e6c64ee5b0ac5b5daa2e046890e2d4144e1 | |
| parent | No need to create links for xxboot now that MI installboot is the preferred (diff) | |
| download | wireguard-openbsd-d2efe23825fe8bb84d6d754226a6134669f76c28.tar.xz wireguard-openbsd-d2efe23825fe8bb84d6d754226a6134669f76c28.zip | |
Avoid a race between fopen(3) and fchmod(2). Use umask(2) and
unlink(2) and fopen(3) to prevent an attacker to open an old file
with wrong permissions before the secret is written into it. This
also guarantees that a new file with correct permissions is created.
Without fchmod(2) "fattr" can be removed from pledge.
with and OK deraadt@
| -rw-r--r-- | usr.bin/x99token/x99token.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/usr.bin/x99token/x99token.c b/usr.bin/x99token/x99token.c index eb5f68f4fc8..0aaa0919bdc 100644 --- a/usr.bin/x99token/x99token.c +++ b/usr.bin/x99token/x99token.c @@ -1,4 +1,4 @@ -/* $OpenBSD: x99token.c,v 1.11 2015/10/15 17:23:09 bluhm Exp $ */ +/* $OpenBSD: x99token.c,v 1.12 2015/10/15 19:30:03 bluhm Exp $ */ /* * X9.9 calculator @@ -46,7 +46,7 @@ main(int argc, char **argv) unsigned int pin; struct passwd *pwd; - if (pledge("stdio rpath wpath cpath fattr getpw tty", NULL) == -1) + if (pledge("stdio rpath wpath cpath getpw tty", NULL) == -1) err(1, "pledge"); while ((i = getopt(argc, argv, "dk:in:")) != -1) { @@ -139,9 +139,10 @@ main(int argc, char **argv) key[0] ^= (pin >> ((i * 7) % 26)) & 0x7f; if (init) { + umask(S_IRWXG | S_IRWXO); + unlink(keyfile); if ((fp = fopen(keyfile, "w")) == NULL) err(1, "could not open %s for writing", keyfile); - fchmod(fileno(fp), 0600); for (i = 0; i < 8; ++i) { fprintf(fp, "%c", digits[(key[i]>>4)&0xf]); fprintf(fp, "%c", digits[(key[i]>>0)&0xf]); |