[tracker/tracker-1.10] libtracker-common: Whitelist umask



commit 87fa852eecddeb6cc1d20a6cf5eb61764d9201d3
Author: Carlos Garnacho <carlosg gnome org>
Date:   Sat Dec 17 15:46:19 2016 +0100

    libtracker-common: Whitelist umask
    
    Let's give extractor modules the illusion that they can write
    something, they actually can't.

 src/libtracker-common/tracker-seccomp.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
---
diff --git a/src/libtracker-common/tracker-seccomp.c b/src/libtracker-common/tracker-seccomp.c
index 5f2e4ac..e00fe14 100644
--- a/src/libtracker-common/tracker-seccomp.c
+++ b/src/libtracker-common/tracker-seccomp.c
@@ -93,6 +93,7 @@ tracker_seccomp_init (void)
        ALLOW_RULE (utime);
        ALLOW_RULE (time);
        ALLOW_RULE (fsync);
+       ALLOW_RULE (umask);
        /* Processes and threads */
        ALLOW_RULE (clone);
        ALLOW_RULE (futex);


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]