From fc118e13a9af1e54a6d95a50ef4dca6de25bab02 Mon Sep 17 00:00:00 2001 From: semarie Date: Thu, 7 Jul 2016 09:24:09 +0000 Subject: [PATCH] tmux: only consider ACCESSPERMS for setting mode on socket_path. it explicitly removes any S_ISUID|S_ISGID|S_ISTXT bits, instead of letting pledge(2) silenciously remove them. ok nicm@ beck@ deraadt@ --- server.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server.c b/server.c index 24b1915a..051e2dec 100644 --- a/server.c +++ b/server.c @@ -258,7 +258,7 @@ server_update_socket(void) if (stat(socket_path, &sb) != 0) return; - mode = sb.st_mode; + mode = sb.st_mode & ACCESSPERMS; if (n != 0) { if (mode & S_IRUSR) mode |= S_IXUSR;