security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-05-19 09:02:22 +02:00
Code Activity

wks: Relax permission check for the top directory.

Browse Source 
* tools/gpg-wks-server.c: Allow S_IXOTH for the top directory.

Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
Werner Koch 2016-08-31 16:39:55 +02:00
parent edfb6934ca
commit e4eac16330
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
tools/gpg-wks-server.c
View File

@ -17,7 +17,7 @@
* along with this program; if not, see <http://www.gnu.org/licenses/>. * along with this program; if not, see <http://www.gnu.org/licenses/>.
*/ */
/* The Web Key Service I-D defines an update protocol to stpre a /* The Web Key Service I-D defines an update protocol to store a
* public key in the Web Key Directory. The current specification is * public key in the Web Key Directory. The current specification is
* draft-koch-openpgp-webkey-service-01.txt. * draft-koch-openpgp-webkey-service-01.txt.
*/ */
@ -302,7 +302,7 @@ main (int argc, char **argv)
log_error ("directory '%s' not owned by user\n", opt.directory); log_error ("directory '%s' not owned by user\n", opt.directory);
exit (2); exit (2);
} }
if ((sb.st_mode & S_IRWXO)) if ((sb.st_mode & (S_IROTH|S_IWOTH)))
{ {
log_error ("directory '%s' has too relaxed permissions\n", log_error ("directory '%s' has too relaxed permissions\n",
opt.directory); opt.directory);
@ -878,7 +878,7 @@ store_key_as_pending (const char *dir, estream_t key,
} }
/* Send a confirmation rewqyest. DIR is the directory used for the /* Send a confirmation request. DIR is the directory used for the
* address MBOX. NONCE is the nonce we want to see in the response to * address MBOX. NONCE is the nonce we want to see in the response to
* this mail. FNAME the name of the file with the key. */ * this mail. FNAME the name of the file with the key. */
static gpg_error_t static gpg_error_t