Security fix for use in multi-user environments

The tomb mount is now readable by the opening uid only (711 r-x--x--x);
directory access is preserved to allow sharing access to certain subdirs.

Review and fix contributed by Morten Langlo
This commit is contained in:
Jaromil 2014-07-14 18:58:09 +02:00
parent 252d79223b
commit da349afeda

2
tomb
View File

@ -1560,7 +1560,7 @@ mount_tomb() {
mount -o $MOUNTOPTS /dev/mapper/${mapper} ${tombmount} mount -o $MOUNTOPTS /dev/mapper/${mapper} ${tombmount}
chown ${_uid}:${_gid} ${tombmount} chown ${_uid}:${_gid} ${tombmount}
chmod 0750 ${tombmount} chmod 0711 ${tombmount}
_success "Success opening $tombfile on $fg_bold[white]$tombmount$fg_no_bold[white]" _success "Success opening $tombfile on $fg_bold[white]$tombmount$fg_no_bold[white]"