cvs commit: ports/chinese/zhcon Makefile ports/chinese/zhcon/files patch-src::configfile.cpp

Tue Jan 25 05:55:07 PST 2005

nectar      2005-01-25 13:55:06 UTC

  FreeBSD ports repository

  Modified files:
    chinese/zhcon        Makefile 
  Added files:
    chinese/zhcon/files  patch-src::configfile.cpp 
  Log:
  The set-user-ID binary zhcon normally reads it's user-specified
  configuration file as root.  Drop privileges before opening the file to
  prevent a local user from reading arbitrary files.
  
  Reported by:    Erik SjÃ¶lund
  Obtained from:  Debian
  
  Revision  Changes    Path
  1.32      +1 -1      ports/chinese/zhcon/Makefile
  1.1       +21 -0     ports/chinese/zhcon/files/patch-src::configfile.cpp (new)