From c7c285fbb5d578e643421cb56c7d4bffafd43c3f Mon Sep 17 00:00:00 2001 From: Benjamin Schieder Date: Tue, 21 Mar 2006 13:29:39 +0000 Subject: [PATCH] Benjamin Schieder: fix a privilege escalation/DoS bug in xorg 6.9.0 this is a SECURITY patch [2006032110465717762] (https://www.rocklinux.net/submaster) git-svn-id: http://www.rocklinux.org/svn/rock-linux/trunk@7260 c5f82cb5-29bc-0310-9cd0-bff59a50e3bc --- package/x11/xorg/x11r6.9.0-geteuid.patch | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 package/x11/xorg/x11r6.9.0-geteuid.patch diff --git a/package/x11/xorg/x11r6.9.0-geteuid.patch b/package/x11/xorg/x11r6.9.0-geteuid.patch new file mode 100644 index 000000000..afb7d4de7 --- /dev/null +++ b/package/x11/xorg/x11r6.9.0-geteuid.patch @@ -0,0 +1,20 @@ +--- programs/Xserver/hw/xfree86/common/xf86Init.c.orig 2006-03-17 23:30:10.000000000 +0200 ++++ programs/Xserver/hw/xfree86/common/xf86Init.c 2006-03-17 23:29:35.000000000 +0200 +@@ -1376,7 +1376,7 @@ + } + + /* First the options that are only allowed for root */ +- if (getuid() == 0 || geteuid != 0) ++ if (getuid() == 0 || geteuid() != 0) + { + if (!strcmp(argv[i], "-modulepath")) + { +@@ -1679,7 +1679,7 @@ + } + if (!strcmp(argv[i], "-configure")) + { +- if (getuid() != 0 && geteuid == 0) { ++ if (getuid() != 0 && geteuid() == 0) { + ErrorF("The '-configure' option can only be used by root.\n"); + exit(1); + }