From 8c533d1c49f47b7919de72c794abe9d2e0660ebd Mon Sep 17 00:00:00 2001 From: Aki Tuomi Date: Thu, 8 Feb 2018 13:04:48 +0200 Subject: [PATCH] old-stats: Set process dumpable during stats gathering /proc/self/io is not accessible otherwise --- src/plugins/old-stats/mail-stats-fill.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/plugins/old-stats/mail-stats-fill.c b/src/plugins/old-stats/mail-stats-fill.c index 395cece627..b29c800b6f 100644 --- a/src/plugins/old-stats/mail-stats-fill.c +++ b/src/plugins/old-stats/mail-stats-fill.c @@ -2,6 +2,7 @@ #include "lib.h" #include "time-util.h" +#include "restrict-access.h" #include "stats-plugin.h" #include "mail-stats.h" @@ -45,6 +46,10 @@ static int process_io_open(void) if (proc_io_disabled) return -1; + + bool dumpable = restrict_access_get_dumpable(); + if (!dumpable) + restrict_access_set_dumpable(TRUE); proc_io_fd = open(PROC_IO_PATH, O_RDONLY); if (proc_io_fd == -1 && errno == EACCES) { /* kludge: if we're running with permissions temporarily @@ -60,6 +65,8 @@ static int process_io_open(void) } errno = EACCES; } + if (!dumpable) + restrict_access_set_dumpable(FALSE); if (proc_io_fd == -1) { /* ignore access errors too, certain security options can prevent root access to this file when not owned by root */ -- 2.47.3