Merge pull request #3572 from smitsohu/dumpable

hardening: run plugins with dumpable flag cleared

1 files changed, 6 insertions, 0 deletions

diff --git a/src/fcopy/main.c b/src/fcopy/main.c
index 83d9c17e6..67237b4ea 100644
--- a/src/fcopy/main.c
+++ b/src/fcopy/main.c
@@ -23,6 +23,7 @@
 #include <ftw.h>
 #include <errno.h>
 #include <pwd.h>
+#include <sys/prctl.h>
 
 #if HAVE_SELINUX
 #include <sys/stat.h>
@@ -411,6 +412,11 @@ int main(int argc, char **argv) {
                 exit(1);
         }
 
+#ifdef WARN_DUMPABLE
+        if (prctl(PR_GET_DUMPABLE, 0, 0, 0, 0) == 1 && getuid())
+                fprintf(stderr, "Error fcopy: I am dumpable\n");
+#endif
+
         // trim trailing chars
         if (src[strlen(src) - 1] == '/')
                 src[strlen(src) - 1] = '\0';