mirrors/ladybird
0
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-08-05 15:49:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Kernel/ProcFS: Tighten permissions on the exposed objects

Browse source 
This is needed so we properly set the limits for different objects in
the filesystem.
This commit is contained in:
Liav A 2021-06-23 10:29:15 +03:00 • committed by Andreas Kling
commit d79d9e833e
Notes: sideshowbarker 2024-07-18 11:16:24 +09:00
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
Kernel/FileSystem/ProcFS.cpp
View file

@ -142,8 +142,8 @@ InodeMetadata ProcFSInode::metadata() const
InodeMetadata metadata;
metadata.inode = { fsid(), m_associated_component->component_index() };
metadata.mode = m_associated_component->required_mode();
metadata.uid = 0;
metadata.gid = 0;
metadata.uid = m_associated_component->owner_user();
metadata.gid = m_associated_component->owner_group();
metadata.size = m_associated_component->size();
metadata.mtime = mepoch;
return metadata;
@ -212,9 +212,9 @@ InodeMetadata ProcFSDirectoryInode::metadata() const
Locker locker(m_lock);
InodeMetadata metadata;
metadata.inode = { fsid(), m_associated_component->component_index() };
metadata.mode = S_IFDIR | S_IRUSR | S_IRGRP | S_IROTH | S_IXOTH;
metadata.uid = 0;
metadata.gid = 0;
metadata.mode = S_IFDIR | m_associated_component->required_mode();
metadata.uid = m_associated_component->owner_user();
metadata.gid = m_associated_component->owner_group();
metadata.size = 0;
metadata.mtime = mepoch;
return metadata;
@ -255,8 +255,8 @@ InodeMetadata ProcFSLinkInode::metadata() const
InodeMetadata metadata;
metadata.inode = { fsid(), m_associated_component->component_index() };
metadata.mode = S_IFLNK | m_associated_component->required_mode();
metadata.uid = 0;
metadata.gid = 0;
metadata.uid = m_associated_component->owner_user();
metadata.gid = m_associated_component->owner_group();
metadata.size = 0;
metadata.mtime = mepoch;
return metadata;