diff options
| -rw-r--r-- | doc/bugs/ikiwiki-mass-rebuild_fails_to_drop_privileges_and_execute_ikiwiki.mdwn | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/doc/bugs/ikiwiki-mass-rebuild_fails_to_drop_privileges_and_execute_ikiwiki.mdwn b/doc/bugs/ikiwiki-mass-rebuild_fails_to_drop_privileges_and_execute_ikiwiki.mdwn new file mode 100644 index 000000000..ae7f908d2 --- /dev/null +++ b/doc/bugs/ikiwiki-mass-rebuild_fails_to_drop_privileges_and_execute_ikiwiki.mdwn @@ -0,0 +1,24 @@ +The ikiwiki-mass-rebuild utility fails to drop privileges and fails to execute ikiwiki on FreeBSD. + +The solution is to set the effective UID after setting the real UID, and to set $PATH in the environment before calling exec(). + +Proposed patch: + + --- ikiwiki-mass-rebuild.orig 2007-08-15 22:21:59.000000000 +0200 + +++ ikiwiki-mass-rebuild 2007-10-25 13:04:10.000000000 +0200 + @@ -22,13 +22,14 @@ sub processline { + my ($uuid, $ugid) = (getpwnam($user))[2, 3]; + $)="$ugid $ugid"; + $(=$ugid; + - $>=$uuid; + $<=$uuid; + + $>=$uuid; + if ($< != $uuid || $> != $uuid || $( != $ugid || $) ne "$ugid $ugid") { + die "failed to drop permissions to $user"; + } + %ENV=(); + $ENV{HOME}=(getpwnam($user))[7]; + + $ENV{PATH}="/usr/bin:/usr/local/bin"; + exec("ikiwiki", "-setup", $setup, @ARGV); + die "failed to run ikiwiki: $!"; + } |