KittyPatch/kitty
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Restore permissions check on pwfile

Browse Source 
just use RW instead of R as the expected mode
This commit is contained in:
Kovid Goyal 2023-01-26 08:48:35 +05:30
parent 4f5e3f6cf1
commit 3a126ffa9d
No known key found for this signature in database
GPG Key ID: 06BC317B515ACE7C
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
kittens/ssh/main.py
View File

@ -50,6 +50,9 @@ def read_data_from_shared_memory(shm_name: str) -> Any:
shm.unlink()
if shm.stats.st_uid != os.geteuid() or shm.stats.st_gid != os.getegid():
raise ValueError('Incorrect owner on pwfile')
mode = stat.S_IMODE(shm.stats.st_mode)
if mode != stat.S_IREAD | stat.S_IWRITE:
raise ValueError('Incorrect permissions on pwfile')
return json.loads(shm.read_data_with_size())