This entire series has been already reviewed and merged as part of security
audit from SUSE security team.
Note that the classifications are Low/Medium.
Distributions should already have patches/packages.
Regards,
Frediano Ziglio
>
> Create the socket with the right permissions using umask.
From: Frediano Ziglio
Create the socket with the right permissions using umask.
This also prevents possible symlink exploitation in case socket
path is not secure.
Signed-off-by: Frediano Ziglio
Acked-by: Uri Lublin
---
src/vdagentd/vdagentd.c | 12 ++--
1 file changed, 2 insertions(+