Bugtraq mailing list archives

Re: Adobe Acrobat creates world writable ~/AdobeFnt.lst files


From: wim () djo wtm tudelft nl
Date: Wed, 22 Aug 2001 20:54:46 +0200 (MEST)


Adobe Acrobat creates world writable ~/AdobeFnt.lst files
...
Another possible workaround would be to create a shared object that
replaced the open/chmod calls that change the permissions on the file,
this could then be LD_PRELOAD'd so that acroread doesn't do the wrong thing.

Using truss on Solaris we can easily see that acroread actually makes
an explicit call to set the permissions to 0666.

And what if that call fails?
chattr +i will do miracles, I imagine.


Regards, Wim.


Current thread: