Re: [PATCH v2 1/2] um: Set secure access mode for temporary file
From: MickaÃl SalaÃn
Date: Sun Dec 06 2015 - 07:12:16 EST
On 04/12/2015 18:13, Tristan Schmelcher wrote:
> File permissions are checked at time of open, so I think this fchmod
> call has never had any effect.
Indeed, mmap doesn't require the file to be executable, only readable and writable. The fchmod seems to be a guarantee for this permissions but I don't see why a file newly created could not be writable.
>
> If there is a concern that the mkstemp implementation may be insecure,
> why not set and restore the umask?
>
I will add this safeguard.
MickaÃl
Attachment:
signature.asc
Description: OpenPGP digital signature