From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 11 Jan 2025 17:44:44 +0000 (+0000)
Subject: jail: Reset umask to 022
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bcc20c5f3dffe91e3a3cf3e5cea879fe093bad38;p=people%2Fric9%2Fpakfire.git

jail: Reset umask to 022

Fixes: #13806
Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/pakfire/jail.c b/src/pakfire/jail.c
index 1941c889a..48940fe04 100644
--- a/src/pakfire/jail.c
+++ b/src/pakfire/jail.c
@@ -32,6 +32,7 @@
 #include <sys/personality.h>
 #include <sys/prctl.h>
 #include <sys/resource.h>
+#include <sys/stat.h>
 #include <sys/types.h>
 
 // libnl3
@@ -1254,6 +1255,9 @@ static int pakfire_jail_child(struct pakfire_jail* jail, struct pakfire_jail_exe
 		}
 	}
 
+	// Reset umask to 022 - this always succeeds
+	umask(S_IWGRP|S_IWOTH);
+
 	// Create a new session
 	r = setsid();
 	if (r < 0) {