diff options
| author | Steven Barth <steven@midlink.org> | 2008-09-01 16:05:34 +0000 |
|---|---|---|
| committer | Steven Barth <steven@midlink.org> | 2008-09-01 16:05:34 +0000 |
| commit | bb8137062f3ea698d39ca25b86b44b9c3cc12dde (patch) | |
| tree | 876636c639f42b0be31f7552d1a294974595786a /libs/web/luasrc/sauth.lua | |
| parent | c1edac6ed0d69f4882aa56609b7c1be683da3333 (diff) | |
libs/web: Added several sanity checks to avoid local privilege escalation
Diffstat (limited to 'libs/web/luasrc/sauth.lua')
| -rw-r--r-- | libs/web/luasrc/sauth.lua | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/libs/web/luasrc/sauth.lua b/libs/web/luasrc/sauth.lua index 7c483119ca..0ac236753e 100644 --- a/libs/web/luasrc/sauth.lua +++ b/libs/web/luasrc/sauth.lua @@ -57,7 +57,7 @@ end -- @param id Session identifier -- @return Session data function read(id) - if not id or not sane() then + if not id or not sane(sessionpath .. "/" .. id) then return end clean() @@ -67,9 +67,11 @@ end --- Check whether Session environment is sane. -- @return Boolean status -function sane() - return luci.sys.process.info("uid") == luci.fs.stat(sessionpath, "uid") - and luci.fs.stat(sessionpath, "mode") == "rwx------" +function sane(file) + return luci.sys.process.info("uid") + == luci.fs.stat(file or sessionpath, "uid") + and luci.fs.stat(file or sessionpath, "mode") + == (file and "rw-------" or "rwx------") end |