From c14bee4d44ac8c61d56028f2f032e35c32533c38 Mon Sep 17 00:00:00 2001 From: Karel Zak Date: Wed, 3 Jan 2024 14:40:07 +0100 Subject: [PATCH] libmount: reduce utab.lock permissions Signed-off-by: Karel Zak --- libmount/src/lock.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/libmount/src/lock.c b/libmount/src/lock.c index 708e6a5754..cbc74a6034 100644 --- a/libmount/src/lock.c +++ b/libmount/src/lock.c @@ -146,7 +146,7 @@ static int lock_simplelock(struct libmnt_lock *ml) const char *lfile; int rc; struct stat sb; - const mode_t lock_mask = S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH; + const mode_t lock_mask = S_IRUSR|S_IWUSR; assert(ml); @@ -161,8 +161,7 @@ static int lock_simplelock(struct libmnt_lock *ml) sigprocmask(SIG_BLOCK, &sigs, &ml->oldsigmask); } - ml->lockfile_fd = open(lfile, O_RDONLY|O_CREAT|O_CLOEXEC, - S_IWUSR|S_IRUSR|S_IRGRP|S_IROTH); + ml->lockfile_fd = open(lfile, O_RDONLY|O_CREAT|O_CLOEXEC, lock_mask); if (ml->lockfile_fd < 0) { rc = -errno; goto err; -- 2.47.2