hero123457/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Set permissions on pcsc socket dir to owner only

Browse Source 
There is no reason for any user other than the current one to be able
to communicate with the remote smartcard.
This commit is contained in:
matt335672 2022-12-09 11:55:31 +00:00
parent e0578b5621
commit 413678ef3d
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sesman/chansrv/smartcard_pcsc.c
View File

@ -1874,7 +1874,9 @@ scard_pcsc_init(void)
}
}
}
g_chmod_hex(g_pcsclite_ipc_dir, 0x1777);
/* Only the current user should be able to access the remote
* smartcard */
g_chmod_hex(g_pcsclite_ipc_dir, 0x700);
g_snprintf(g_pcsclite_ipc_file, 255, "%s/pcscd.comm", g_pcsclite_ipc_dir);
g_lis->trans_conn_in = my_pcsc_trans_conn_in;
error = trans_listen(g_lis, g_pcsclite_ipc_file);