dma - Fix security hole (#46)

[people/ms/dma.git] / dma-mbox-create.c

diff --git a/dma-mbox-create.c b/dma-mbox-create.c
index 532a7afbe0b53b43bf23515b4de8deec66ed367e..45a4792a3f6f498c7227d34b7defeea7bb1a52ac 100644 (file)
--- a/dma-mbox-create.c
+++ b/dma-mbox-create.c
@@ -142,7 +142,7 @@ main(int argc, char **argv)
                logfail(EX_CANTCREAT, "cannot build mbox path for `%s/%s'", _PATH_MAILDIR, user);
        }
 
-       f = open(fn, O_RDONLY|O_CREAT, 0600);
+       f = open(fn, O_RDONLY|O_CREAT|O_NOFOLLOW, 0600);
        if (f < 0)
                logfail(EX_NOINPUT, "cannt open mbox `%s'", fn);