From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Tue, 2 Feb 2021 12:45:26 +0000 (+0100)
Subject: file_utils: harden lxc_writeat()
X-Git-Tag: lxc-5.0.0~306^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3c5fa7f3e83f5831f6443c49e57eda5c1025a55e;p=thirdparty%2Flxc.git

file_utils: harden lxc_writeat()

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---

diff --git a/src/lxc/file_utils.c b/src/lxc/file_utils.c
index 2fd81d6e2..d871190d7 100644
--- a/src/lxc/file_utils.c
+++ b/src/lxc/file_utils.c
@@ -47,8 +47,7 @@ int lxc_writeat(int dirfd, const char *filename, const void *buf, size_t count)
 	__do_close int fd = -EBADF;
 	ssize_t ret;
 
-	fd = openat(dirfd, filename,
-		    O_WRONLY | O_CLOEXEC | O_NOCTTY | O_NOFOLLOW);
+	fd = open_at(dirfd, filename, PROTECT_OPEN_W_WITH_TRAILING_SYMLINKS, PROTECT_LOOKUP_BENEATH, 0);
 	if (fd < 0)
 		return -1;