Changeset 66627 in vbox for trunk/src/VBox/HostDrivers/Support
- Timestamp:
- Apr 20, 2017 12:56:17 PM (8 years ago)
- svn:sync-xref-src-repo-rev:
- 114675
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp
r66608 r66627 1467 1467 && pFsObjState->Stat.st_gid != 0) 1468 1468 { 1469 # ifdef RT_OS_DARWIN1469 # ifdef RT_OS_DARWIN 1470 1470 /* HACK ALERT: On Darwin /Applications is root:admin with admin having 1471 1471 full access. So, to work around we relax the hardening a bit and … … 1474 1474 bool fBad = !fRelaxed || pFsObjState->Stat.st_gid != 80 /*admin*/ || suplibHardenedStrCmp(pszPath, "/Applications"); 1475 1475 1476 # elif defined(RT_OS_FREEBSD)1476 # elif defined(RT_OS_FREEBSD) 1477 1477 /* HACK ALERT: PC-BSD 9 has group-writable /usr/pib directory which is 1478 1478 similar to /Applications on OS X (see above). … … 1482 1482 bool fBad = !fRelaxed || pFsObjState->Stat.st_gid != 5 /*operator*/ || suplibHardenedStrCmp(pszPath, "/usr/pbi"); 1483 1483 NOREF(fRelaxed); 1484 # elif defined(RT_OS_SOLARIS)1484 # elif defined(RT_OS_SOLARIS) 1485 1485 /* HACK ALERT: Solaris has group-writable /usr/lib/iconv directory from 1486 1486 which the appropriate module is loaded. … … 1489 1489 /** @todo dynamically resolve the bin group? */ 1490 1490 bool fBad = !fRelaxed || pFsObjState->Stat.st_gid != 2 /*bin*/ || suplibHardenedStrCmp(pszPath, "/usr/lib/iconv"); 1491 # else1491 # else 1492 1492 NOREF(fRelaxed); 1493 1493 bool fBad = true; 1494 # endif1494 # endif 1495 1495 if (fBad) 1496 1496 return supR3HardenedSetError3(VERR_SUPLIB_WRITE_NON_SYS_GROUP, pErrInfo,
Note:
See TracChangeset
for help on using the changeset viewer.