Date: Fri, 11 Oct 2024 15:55:41 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 17289] [patch] wrong permissions on /var/run/printer Message-ID: <bug-17289-227-ztFEqj2gy0@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-17289-227@https.bugs.freebsd.org/bugzilla/> References: <bug-17289-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D17289 --- Comment #5 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3D6cde8f3ef7cd060be39d78055eaf982b0= 6b19a3b commit 6cde8f3ef7cd060be39d78055eaf982b06b19a3b Author: Stanislav Shalunov <shalunov@att.com> AuthorDate: 2024-10-11 15:49:02 +0000 Commit: Warner Losh <imp@FreeBSD.org> CommitDate: 2024-10-11 15:50:08 +0000 lpd: Tighten permissions on /var/run/printer Exclude group read/write permissions as well. Otherwise, group wheel can submit things w/o the normal accounting. While group wheel is generally trusted on the machine, submitting jobs w/o checks is not one of the functions we document for that group. PR: 17289 Differential Revision: https://reviews.freebsd.org/D47040 usr.sbin/lpr/lpd/lpd.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-17289-227-ztFEqj2gy0>