lpd: Tighten permissions on /var/run/printer

Exclude group read/write permissions as well. Otherwise, group wheel can
submit things w/o the normal accounting. While group wheel is generally
trusted on the machine, submitting jobs w/o checks is not one of the
functions we document for that group.

PR: 17289
Differential Revision:	https://reviews.freebsd.org/D47040
This commit is contained in:
Stanislav Shalunov 2024-10-11 09:49:02 -06:00 committed by Warner Losh
parent c008b8f585
commit 6cde8f3ef7

View File

@ -314,7 +314,7 @@ main(int argc, char **argv)
sigaddset(&nmask, SIGTERM);
sigprocmask(SIG_BLOCK, &nmask, &omask);
(void) umask(07);
(void) umask(077);
signal(SIGHUP, mcleanup);
signal(SIGINT, mcleanup);
signal(SIGQUIT, mcleanup);