gnustep/libs-base
0
0
Fork 0
mirror of https://github.com/gnustep/libs-base.git synced 2025-04-23 00:41:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add security checks

Browse source 
git-svn-id: svn+ssh://svn.gna.org/svn/gnustep/libs/base/trunk@13619 72102866-910b-0410-8b05-ffd578937521
This commit is contained in:
CaS 2002-05-10 09:56:26 +00:00
parent 6280540d2a
commit 58d0257a97
1 changed files with 21 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
Source/NSUser.m
View file

@ -495,9 +495,11 @@ userDirectory(NSString *name, BOOL defaults)
NSString *defs = nil;
BOOL forceD = NO;
BOOL forceU = NO;
NSDictionary *attributes;
NSCAssert([name length] > 0, NSInvalidArgumentException);
home = NSHomeDirectoryForUser(name);
manager = [NSFileManager defaultManager];
if (gnustep_system_root == nil)
@ -509,8 +511,13 @@ userDirectory(NSString *name, BOOL defaults)
[gnustep_global_lock unlock];
}
file = [gnustep_system_root stringByAppendingPathComponent: @".GNUsteprc"];
if ([manager isReadableFileAtPath: file] == YES)
attributes = [manager fileAttributesAtPath: file traverseLink: YES];
if (([attributes filePosixPermissions] & 022) != 0)
{
fprintf(stderr, "The file '%s' is writable by someone other than"
" its owner.\nIgnoring it.\n", [file fileSystemRepresentation]);
}
else if ([manager isReadableFileAtPath: file] == YES)
{
NSArray *lines;
unsigned count;
@ -572,10 +579,20 @@ userDirectory(NSString *name, BOOL defaults)
if (forceD == NO || defs == nil || forceU == NO || user == nil)
{
home = NSHomeDirectoryForUser(name);
file = [home stringByAppendingPathComponent: @".GNUsteprc"];
if ([manager isReadableFileAtPath: file] == YES)
attributes = [manager fileAttributesAtPath: file traverseLink: YES];
if (([attributes filePosixPermissions] & 022) != 0)
{
fprintf(stderr, "The file '%s' is writable by someone other than"
" its owner.\nIgnoring it.\n", [file fileSystemRepresentation]);
}
else if ([[attributes fileOwnerAccountName] isEqual: NSUserName()] == NO)
{
fprintf(stderr, "The file '%s' is not owned by the current user."
"\nIgnoring it.\n", [file fileSystemRepresentation]);
}
else if ([manager isReadableFileAtPath: file] == YES)
{
NSArray *lines;
unsigned count;