[src/netbsd-1-4]: src/sys/kern Pull up revision 1.93:

[he <he%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/59e7222335cd
branches:  netbsd-1-4
changeset: 469325:59e7222335cd
user:      he <he%NetBSD.org@localhost>
date:      Fri Sep 03 08:50:43 1999 +0000

description:
Pull up revision 1.93:
  Don't allow coredump to follow symlinks, this has security
  implications.  (bouyer)

diffstat:

 sys/kern/kern_sig.c |  7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)

diffs (21 lines):

diff -r 91c28c304a30 -r 59e7222335cd sys/kern/kern_sig.c
--- a/sys/kern/kern_sig.c       Fri Sep 03 08:48:54 1999 +0000
+++ b/sys/kern/kern_sig.c       Fri Sep 03 08:50:43 1999 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: kern_sig.c,v 1.87 1999/03/24 05:51:23 mrg Exp $        */
+/*     $NetBSD: kern_sig.c,v 1.87.2.1 1999/09/03 08:50:43 he Exp $     */
 
 /*
  * Copyright (c) 1982, 1986, 1989, 1991, 1993
@@ -1214,8 +1214,9 @@
                sprintf(name, "core");
        else
                sprintf(name, "%s.core", p->p_comm);
-       NDINIT(&nd, LOOKUP, FOLLOW, UIO_SYSSPACE, name, p);
-       error = vn_open(&nd, O_CREAT | FWRITE, S_IRUSR | S_IWUSR);
+       
+       NDINIT(&nd, LOOKUP, NOFOLLOW, UIO_SYSSPACE, name, p);
+       error = vn_open(&nd, O_CREAT | FWRITE | FNOSYMLINK, S_IRUSR | S_IWUSR);
        if (error)
                return (error);
        vp = nd.ni_vp;