dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-08-11 01:25:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

tmpfiles: add hardening in glob_item_recursively

Browse Source 
(cherry picked from commit 001c5dfdf5)
(cherry picked from commit 872ad58935)
(cherry picked from commit 2e9cf18323)
This commit is contained in:
Andres Beltran
2026-07-08 19:06:16 +00:00
committed by Luca Boccassi
parent a94c15302e
commit ec26a4dd29
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/tmpfiles/tmpfiles.c
View File

@@ -2641,10 +2641,9 @@ static int glob_item_recursively(
/* Make sure we won't trigger/follow file object (such as device nodes, automounts, ...)
* pointed out by 'fn' with O_PATH. Note, when O_PATH is used, flags other than
* O_CLOEXEC, O_DIRECTORY, and O_NOFOLLOW are ignored. */
fd = open(*fn, O_CLOEXEC|O_NOFOLLOW|O_PATH);
fd = path_open_safe(*fn);
if (fd < 0) {
RET_GATHER(r, log_error_errno(errno, "Failed to open '%s': %m", *fn));
RET_GATHER(r, fd);
continue;
}