[Pm-utils] some simple patches from fedora

Stefan Seyfried seife at suse.de
Wed Jan 30 02:41:47 PST 2008


On Sun, Dec 23, 2007 at 11:33:52PM +0100, Till Maas wrote:
> Hi,
> 
> here are some patches from Fedora that work on cvs HEAD, I guess the cfg patch 
> is known by everyone and the manpage typo is also pretty obvious. The logfile 
> patch is required on systems that use selinux. When the logfile is deleted, 
> the selinux context is lost. Therefore the patch changes pm-utils not to 
> remove the logfile.

If somebody managed to get a symlink where the logfile should be, you are fscked.
So i think this is less secure.

> There is no need to remove the logfile, because the ">" after exec in the next line
> already truncates the logfile to zero length. Also removing is wrong, because it

What it $PM_LOGFILE is a symlink to /etc/passwd?

> destroys the selinux context of the logfile. Bugzilla Reports:
> https://bugzilla.redhat.com/show_bug.cgi?id=237840
> https://bugzilla.redhat.com/show_bug.cgi?id=238068

Then fix selinux. No need to make pm-utils insecure.
-- 
Stefan Seyfried
R&D Team Mobile Devices            |              "Any ideas, John?"
SUSE LINUX Products GmbH, Nürnberg | "Well, surrounding them's out." 

This footer brought to you by insane German lawmakers:
SUSE Linux Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg)


More information about the Pm-utils mailing list