6bae32e drop privileges before parsing xml — HardenedBSD-pkg

HardenedBSD Package Manager

drop privileges before parsing xml

Baptiste Daroussin committed 9 years ago

commit 6bae32e051eb4fbb84d82b308611362c8cd76cf7
parent 5a3f220e3e186212c2f19d2254c57d6d843f1f9f

1 file changed +1 -0

modified src/audit.c

@@ -172,6 +172,7 @@ exec_audit(int argc, char **argv)

 		}
 	}
 	drop_privileges();
 	if (pkg_audit_load(audit, audit_file) != EPKG_OK) {
 		if (errno == ENOENT)
 			warnx("vulnxml file %s does not exist. "