xz: Fix the Capsicum rights on user_abort_pipe.

2015-04-01 14:45:25 +03:00 · 2015-04-01 14:45:25 +03:00 · fc0df0f8db
parent 57393615b3
commit fc0df0f8db
1 changed files with 5 additions and 1 deletions
--- a/src/xz/file_io.c
+++ b/src/xz/file_io.c
@ -195,8 +195,12 @@ io_sandbox_enter(int src_fd)
 			CAP_WRITE, CAP_SEEK)))
 		goto error;

+	if (cap_rights_limit(user_abort_pipe[0], cap_rights_init(&rights,
+			CAP_EVENT)))
+		goto error;
+
 	if (cap_rights_limit(user_abort_pipe[1], cap_rights_init(&rights,
-			CAP_EVENT, CAP_WRITE)))
+			CAP_WRITE)))
 		goto error;

 	if (cap_enter())