Re: Vulnerability in pcs or is it in more generic code?

On Fri, 2022-09-09 at 22:41 +0200, Ola Lundqvist wrote: > I see that I was not clear what I meant with "in general" :-) Woops, sorry for the noise :) > Here I found how the generic source code looks like: > https://rubydoc.info/gems/thin/1.3.1/Thin%2FBackends%2FUnixServer:connect > > You can se

Re: Vulnerability in pcs or is it in more generic code?

Hi Paul I see that I was not clear what I meant with "in general" :-) In the fix for pcs https://github.com/ClusterLabs/pcs/commit/de068e2066e377d1cc77edf25aed0198e4c77f7b you can see a comment that there is a change from umask(0) to umask(0x077) It was this umask(0) (in Thin::Backends::UnixServ