diff options
| author |  Aleksey Manevich <manevich.aleksey@gmail.com> | 2016-09-12 15:03:03 +0300 |
|---|---|---|
| committer | Aleksey Manevich <manevich.aleksey@gmail.com> | 2016-09-12 15:03:03 +0300 |
| commit | ddf50ee4f6364f5b465921c1eed50fc879bc2310 (patch) | |
| tree | aa4241b91bfd4419992aff0653bfa33f9233c6a0 /src | |
| parent | Merge pull request #773 from manevich/x11 (diff) | |
| download | firejail-ddf50ee4f6364f5b465921c1eed50fc879bc2310.tar.gz firejail-ddf50ee4f6364f5b465921c1eed50fc879bc2310.tar.zst firejail-ddf50ee4f6364f5b465921c1eed50fc879bc2310.zip | |
grsecurity fix
Diffstat (limited to 'src')
| -rw-r--r-- | src/firejail/x11.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/firejail/x11.c b/src/firejail/x11.c index 29111d5ff..48af39caf 100644 --- a/src/firejail/x11.c +++ b/src/firejail/x11.c | |||
| @@ -54,7 +54,11 @@ static int x11_check_xephyr(void) { | |||
| 54 | // check for X11 abstract sockets | 54 | // check for X11 abstract sockets |
| 55 | static int x11_abstract_sockets_present(void) { | 55 | static int x11_abstract_sockets_present(void) { |
| 56 | char *path; | 56 | char *path; |
| 57 | |||
| 58 | EUID_ROOT(); // grsecurity fix | ||
| 57 | FILE *fp = fopen("/proc/net/unix", "r"); | 59 | FILE *fp = fopen("/proc/net/unix", "r"); |
| 60 | EUID_USER(); | ||
| 61 | |||
| 58 | if (!fp) | 62 | if (!fp) |
| 59 | errExit("fopen"); | 63 | errExit("fopen"); |
| 60 | 64 | ||