From: Karel Zak <kzak@redhat.com>
Date: Wed, 3 Jan 2024 13:40:07 +0000 (+0100)
Subject: libmount: reduce utab.lock permissions
X-Git-Tag: v2.40-rc1~50^2~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c14bee4d44ac8c61d56028f2f032e35c32533c38;p=thirdparty%2Futil-linux.git

libmount: reduce utab.lock permissions

Signed-off-by: Karel Zak <kzak@redhat.com>
---

diff --git a/libmount/src/lock.c b/libmount/src/lock.c
index 708e6a5754..cbc74a6034 100644
--- a/libmount/src/lock.c
+++ b/libmount/src/lock.c
@@ -146,7 +146,7 @@ static int lock_simplelock(struct libmnt_lock *ml)
 	const char *lfile;
 	int rc;
 	struct stat sb;
-	const mode_t lock_mask = S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH;
+	const mode_t lock_mask = S_IRUSR|S_IWUSR;
 
 	assert(ml);
 
@@ -161,8 +161,7 @@ static int lock_simplelock(struct libmnt_lock *ml)
 		sigprocmask(SIG_BLOCK, &sigs, &ml->oldsigmask);
 	}
 
-	ml->lockfile_fd = open(lfile, O_RDONLY|O_CREAT|O_CLOEXEC,
-				      S_IWUSR|S_IRUSR|S_IRGRP|S_IROTH);
+	ml->lockfile_fd = open(lfile, O_RDONLY|O_CREAT|O_CLOEXEC, lock_mask);
 	if (ml->lockfile_fd < 0) {
 		rc = -errno;
 		goto err;