Merge pull request #3572 from smitsohu/dumpable

hardening: run plugins with dumpable flag cleared

1 files changed, 5 insertions, 0 deletions

diff --git a/src/fsec-print/main.c b/src/fsec-print/main.c
index ade45c881..d1f056e47 100644
--- a/src/fsec-print/main.c
+++ b/src/fsec-print/main.c
@@ -61,6 +61,11 @@ printf("\n");
                 return 0;
         }
 
+#ifdef WARN_DUMPABLE
+        if (prctl(PR_GET_DUMPABLE, 0, 0, 0, 0) == 1 && getuid())
+                fprintf(stderr, "Error fsec-print: I am dumpable\n");
+#endif
+
         char *fname = argv[1];
 
         // open input file