Adding checks for fd omission

Adding function check_fds to new file fd.c. The function check_fds
should be called in every setuid/setgid program.

Co-developed-by: Alejandro Colomar <alx@kernel.org>
This commit is contained in:
Skyler Ferrante
2024-03-08 12:53:21 -05:00
committed by Serge Hallyn
parent b76fc2947f
commit d2f2c1877a
11 changed files with 63 additions and 7 deletions
+3 -4
View File
@@ -768,13 +768,12 @@ int main (int argc, char **argv)
gid_t rgid;
const struct passwd *pw;
/*
* Get the program name so that error messages can use it.
*/
sanitize_env ();
check_fds ();
log_set_progname(Prog);
log_set_logfd(stderr);
sanitize_env ();
(void) setlocale (LC_ALL, "");
(void) bindtextdomain (PACKAGE, LOCALEDIR);
(void) textdomain (PACKAGE);