[Pkg-shadow-devel] Bug#307259: Patch

[Moritz Mühlenhoff]

--C7zPtVaVf+AK4Oqc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi,
attached you can find the relevant patch hunk from upstream's
4.0.7->4.0.8 patch. The practical security impact is very small, though.

Cheers,
         Moritz
-- 
Moritz Muehlenhoff muehlenhoff@univention.de     fon: +49 421 22 232- 0
Development        Linux for Your Business       fax: +49 421 22 232-99
Univention GmbH    http://www.univention.de/   mobil: +49 175 22 999 23

--C7zPtVaVf+AK4Oqc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="shadow-patch-snippet.diff"

@@ -1578,7 +1434,7 @@
                        if (access (ms, R_OK) != 0) {
                                fd = open (ms,
                                           O_CREAT | O_EXCL | O_WRONLY |
-                                          O_TRUNC);
+                                          O_TRUNC, 0);
                                if (fd != -1) {
                                        fchown (fd, user_id, mail_gid);
                                        fchmod (fd, mode);

--C7zPtVaVf+AK4Oqc--