Heinrich Schuchardt d1fffbe3c8 sandbox: use sane access rights for files ...

When writing an executable, allowing other users to modify it introduces
a security issue.

Generally we should avoid giving other users write access to our files by
default.

Replace chmod(777) by chmod(755) and chmod(644).

Fixes: 47f5fcfb4169 ("sandbox: Add os_jump_to_image() to run another executable")
Fixes: d9165153caea ("sandbox: add flags for open() call")
Fixes: 5c2859cdc302 ("sandbox: Allow reading/writing of RAM buffer")
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
Reviewed-by: Sean Anderson <seanga2@gmail.com>

2024-07-03 07:36:32 +01:00

..

cpu

sandbox: use sane access rights for files

2024-07-03 07:36:32 +01:00

dts

sandbox: capsule: binman: generate some capsules as part of build

2024-04-08 12:59:31 +02:00

include/asm

Restore patch series "arm: dts: am62-beagleplay: Fix Beagleplay Ethernet"

2024-05-20 13:35:03 -06:00

lib

Revert "Merge patch series "pxe: Allow extlinux booting without CMDLINE enabled""

2024-04-18 08:29:35 -06:00

config.mk

efi_loader: move HOST_ARCH to version_autogenerated.h

2024-04-08 13:04:48 +02:00

Kconfig

sandbox: improve description of CONFIG_SANDBOX_CRASH_RESET

2024-04-12 08:53:31 -06:00

Makefile

sandbox: fix build failure with musl and SDL

2022-02-09 12:26:12 -07:00