[torquedev] [Bug 84] Security bug on the way checkpoint is being handled

[bugzilla-daemon at supercluster.org]

http://www.clusterresources.com/bugzilla/show_bug.cgi?id=84

Tobias Burnus <burnus at net-b.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |burnus at net-b.de

--- Comment #1 from Tobias Burnus <burnus at net-b.de> 2010-09-28 02:38:31 MDT ---
> A simple patch to job_func.c will fix this, in 2.4.10 source,
> diff ./job_func.c ./job_func.c.dist

Looking for other 777 occurrences, one finds it not only in
./src/server/job_func.c's batch_request

  if ((mkdir(serverfile, 0777) == -1) && (errno != EEXIST))


but also in:

./src/resmom/requests.c's req_cpyfile

          if ((mkdir(needdir, 0777) == -1) && (errno != EEXIST))
            {
            log_err(errno, id, "Failed to create jobs checkpoint directory");

and in

./src/resmom/unicos8/mom_start.c's makedir

    if (mkdir(name, 0777) == -1)

-- 
Configure bugmail: http://www.clusterresources.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.