3.0.4 release candidate 2

Alan DeKok aland at deployingradius.com
Thu Aug 28 20:59:39 CEST 2014

Stefan Winter wrote:
> Hi again,
> looking a the code inside rad_mkdir, it realises that the directory
> exists, but then tries a chmod() with hard-wired permissions to 0700
> (rlm_linelog.c harwired this value) (why?) which fails (why, I don't
> know, I'm root after all).


> That chmod() wasn't done in earlier versions; used stat() and returned 0
> without making a fuss.

  It's an attempt at security.  If the call to rad_mkdir() says that the
directory should be 0755, then the directory should be set to that.

  I've pushed a fix.

  Alan DeKok.

More information about the Freeradius-Users mailing list