1
0
Files
monitoring-plugins-bind/monitoring-plugins-bind_-_use_path_tmp.patch
Lars Vogdt 0f9d3cd43d - check_bind.sh uses a static temporary file, allowing users
to break the script by creating the same file with permissions 
  that don't allow the nagios user to write to it (bsc#1183201).
  + added monitoring-plugins-bind_-_use_path_tmp.patch

OBS-URL: https://build.opensuse.org/package/show/server:monitoring/monitoring-plugins-bind?expand=0&rev=9
2021-05-04 11:36:30 +00:00

12 lines
283 B
Diff

--- check_bind.sh.orig 2021-05-04 13:24:36.732856067 +0200
+++ check_bind.sh 2021-05-04 13:25:17.608843986 +0200
@@ -26,7 +26,7 @@
name_pid="named.pid"
path_rndc="/usr/sbin"
path_stats="/var/bind"
-path_tmp="/tmp"
+path_tmp="$(mktemp -d named.XXXXXX)"
version=9.4
pid_check=1