diff options
| author | Kaz Kylheku <kaz@kylheku.com> | 2022-07-24 10:57:03 -0700 |
|---|---|---|
| committer | Kaz Kylheku <kaz@kylheku.com> | 2022-07-24 10:57:03 -0700 |
| commit | 2d645c70e57a1b2a00119e0c1c2b042d888d6aaa (patch) | |
| tree | 7dd90233e6de75027d45ca5cb0982c48603e82a0 /stdlib | |
| parent | 5ff4246327fd802923faa77a3421d2384d643735 (diff) | |
| download | txr-2d645c70e57a1b2a00119e0c1c2b042d888d6aaa.tar.gz txr-2d645c70e57a1b2a00119e0c1c2b042d888d6aaa.tar.bz2 txr-2d645c70e57a1b2a00119e0c1c2b042d888d6aaa.zip | |
path-test: object trust must use effective UID.
* stdlib/path-test.tl (path-private-to-me,
path-strictly-private-to-me): Call (getuid) rather
than (geteuid). We won't revert this behavior with
the -C compat option because it's wrong/insecure.
* txr.1: Updated.
Diffstat (limited to 'stdlib')
| -rw-r--r-- | stdlib/path-test.tl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/stdlib/path-test.tl b/stdlib/path-test.tl index 98ba76f3..3288ef79 100644 --- a/stdlib/path-test.tl +++ b/stdlib/path-test.tl @@ -121,7 +121,7 @@ (defun path-private-to-me-p (path) (sys:path-test (s stat path) (let ((m s.mode) - (uid (getuid))) + (uid (geteuid))) (mlet ((g (getgrgid s.gid)) (name (let ((pw (getpwuid uid))) (if pw pw.name))) @@ -138,7 +138,7 @@ (defun path-strictly-private-to-me-p (path) (sys:path-test (s stat path) (let ((m s.mode) - (uid (getuid))) + (uid (geteuid))) (mlet ((g (getgrgid s.gid)) (name (let ((pw (getpwuid uid))) (if pw pw.name))) |