From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Fri, 15 Jun 2018 09:33:34 +0000 (+0200)
Subject: coverity: #1425770
X-Git-Tag: lxc-2.0.10~89
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f40348415783bbeba82fab1df7dd2e2d140dd81e;p=thirdparty%2Flxc.git

coverity: #1425770

Insecure temporary file

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 582159c8c..2e4934f84 100644
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -2378,8 +2378,11 @@ bool lxc_nic_exists(char *nic)
 int lxc_make_tmpfile(char *template, bool rm)
 {
 	int fd, ret;
+	mode_t msk;
 
+	msk = umask(0022);
 	fd = mkstemp(template);
+	umask(msk);
 	if (fd < 0)
 		return -1;