diff options
| author |   deraadt <deraadt@openbsd.org> | 2004-02-18 04:07:35 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2004-02-18 04:07:35 +0000 |
| commit | ca701c6a2f08bcf333286bd4dc2d51015e142fca (patch) | |
| tree | 17385b0f55629ee57d2c01b33c14893c42206a6e /usr.sbin/procmap/procmap.c | |
| parent | a pinch of knf (diff) | |
| download | wireguard-openbsd-ca701c6a2f08bcf333286bd4dc2d51015e142fca.tar.xz wireguard-openbsd-ca701c6a2f08bcf333286bd4dc2d51015e142fca.zip | |
revoke privs asap; tedu ok
Diffstat (limited to 'usr.sbin/procmap/procmap.c')
| -rw-r--r-- | usr.sbin/procmap/procmap.c | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/usr.sbin/procmap/procmap.c b/usr.sbin/procmap/procmap.c index 13034d02032..f493e6f2aff 100644 --- a/usr.sbin/procmap/procmap.c +++ b/usr.sbin/procmap/procmap.c @@ -1,4 +1,4 @@ -/* $OpenBSD: procmap.c,v 1.6 2004/02/18 03:58:35 deraadt Exp $ */ +/* $OpenBSD: procmap.c,v 1.7 2004/02/18 04:07:35 deraadt Exp $ */ /* $NetBSD: pmap.c,v 1.1 2002/09/01 20:32:44 atatat Exp $ */ /* @@ -257,6 +257,16 @@ main(int argc, char *argv[]) usage(); } } + + /* + * Discard setgid privileges if not the running kernel so that bad + * guys can't print interesting stuff from kernel memory. + */ + if (kernel != NULL || kmem != NULL) { + setegid(getgid()); + setgid(getgid()); + } + argc -= optind; argv += optind; @@ -270,6 +280,10 @@ main(int argc, char *argv[]) /* start by opening libkvm */ kd = kvm_openfiles(kernel, kmem, NULL, O_RDONLY, errbuf); + + setegid(getgid()); + setgid(getgid()); + errbuf[_POSIX2_LINE_MAX] = '\0'; if (kd == NULL) errx(1, "%s", errbuf); |