aboutsummaryrefslogtreecommitdiff
path: root/src/xz
diff options
context:
space:
mode:
authorLasse Collin <lasse.collin@tukaani.org>2023-03-07 19:59:23 +0200
committerLasse Collin <lasse.collin@tukaani.org>2023-03-11 19:34:39 +0200
commitfd56d5353360279c10e8e5e05f5bc6ea03f64584 (patch)
tree837d5858ab3dc3eae0cf557bc39ef5bb7ca11d9b /src/xz
parentxz: Don't fail if Capsicum is enabled but kernel doesn't support it. (diff)
downloadxz-fd56d5353360279c10e8e5e05f5bc6ea03f64584.tar.xz
xz: Make Capsicum sandbox more strict with stdin and stdout.
Diffstat (limited to '')
-rw-r--r--src/xz/file_io.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/xz/file_io.c b/src/xz/file_io.c
index 3f5279f0..29f46ea7 100644
--- a/src/xz/file_io.c
+++ b/src/xz/file_io.c
@@ -199,11 +199,19 @@ io_sandbox_enter(int src_fd)
CAP_EVENT, CAP_FCNTL, CAP_LOOKUP, CAP_READ, CAP_SEEK)))
goto error;
+ if (src_fd != STDIN_FILENO && cap_rights_limit(
+ STDIN_FILENO, cap_rights_clear(&rights)))
+ goto error;
+
if (cap_rights_limit(STDOUT_FILENO, cap_rights_init(&rights,
CAP_EVENT, CAP_FCNTL, CAP_FSTAT, CAP_LOOKUP,
CAP_WRITE, CAP_SEEK)))
goto error;
+ if (cap_rights_limit(STDERR_FILENO, cap_rights_init(&rights,
+ CAP_WRITE)))
+ goto error;
+
if (cap_rights_limit(user_abort_pipe[0], cap_rights_init(&rights,
CAP_EVENT)))
goto error;