Re: [Spice-devel] [PATCH vd_agent_linux 01/10] vdagentd: Avoid calling chmod

2020-11-03 Thread Frediano Ziglio
This entire series has been already reviewed and merged as part of security audit from SUSE security team. Note that the classifications are Low/Medium. Distributions should already have patches/packages. Regards, Frediano Ziglio > > Create the socket with the right permissions using umask.

[Spice-devel] [PATCH vd_agent_linux 01/10] vdagentd: Avoid calling chmod

2020-11-03 Thread Frediano Ziglio
From: Frediano Ziglio Create the socket with the right permissions using umask. This also prevents possible symlink exploitation in case socket path is not secure. Signed-off-by: Frediano Ziglio Acked-by: Uri Lublin --- src/vdagentd/vdagentd.c | 12 ++-- 1 file changed, 2 insertions(+