1berry/webmin
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Make sure temp files created for diffing aren't work-readable

Browse Source
This commit is contained in:
Jamie Cameron 2019-09-19 08:49:25 -07:00
parent 57daa0c1d8
commit 03d77c5703
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
web-lib-funcs.pl
View File

@ -5780,9 +5780,11 @@ if (exists($main::locked_file_data{$realfile})) {
if (!defined($main::locked_file_data{$realfile})) { if (!defined($main::locked_file_data{$realfile})) {
$type = "create"; $type = "create";
} }
my $u = umask(0700);
open(ORIGFILE, ">$realfile.webminorig"); open(ORIGFILE, ">$realfile.webminorig");
print ORIGFILE $main::locked_file_data{$realfile}; print ORIGFILE $main::locked_file_data{$realfile};
close(ORIGFILE); close(ORIGFILE);
umask($u);
$diff = &backquote_command( $diff = &backquote_command(
"diff ".quotemeta("$realfile.webminorig")." ". "diff ".quotemeta("$realfile.webminorig")." ".
quotemeta($realfile)." 2>/dev/null"); quotemeta($realfile)." 2>/dev/null");