-
-
Notifications
You must be signed in to change notification settings - Fork 136
Closed
Labels
Description
ocat is a setuid program which uses access(2) to verify accessibilty of the defaults file. I don't see how this hasn't surfaced previously, but that is an incorrect use:
The access() system call uses the real user ID in place of the effective user ID, the real group ID in place of the effective group ID, and the rest of the group access list.
I noticed this while tailing logs for #536
ocat: Skipping open defaults file /etc/default/ot-recorder: Permission denied
Reactions are currently unavailable