diff options
| author | Timothy Pearson <kb9vqf@pearsoncomputing.net> | 2012-01-19 23:22:04 -0600 |
|---|---|---|
| committer | Slávek Banko <slavek.banko@axis.cz> | 2012-06-03 03:26:43 +0200 |
| commit | f0f1b398e656f79b4a4dfd71a6053014e42df0f1 (patch) | |
| tree | 8a27f2ce08c5b12eb8189f43a6ede2399a5443ce /kdesktop/lock | |
| parent | 5ec582975948160bcb42efc3f0bb23ccda47be99 (diff) | |
| download | tdebase-f0f1b398e656f79b4a4dfd71a6053014e42df0f1.tar.gz tdebase-f0f1b398e656f79b4a4dfd71a6053014e42df0f1.zip | |
If someone manages to close down kdesktop_lock through an undiscovered security vulnerability such as http://security-tracker.debian.org/tracker/CVE-2012-0064, immediately terminate the compromised TDE session
(cherry picked from commit f05f9dc7532ea41c49b3e9385165d942dfab5d0e)
Diffstat (limited to 'kdesktop/lock')
| -rw-r--r-- | kdesktop/lock/lockprocess.cc | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/kdesktop/lock/lockprocess.cc b/kdesktop/lock/lockprocess.cc index ed183b6f0..6b39e64c8 100644 --- a/kdesktop/lock/lockprocess.cc +++ b/kdesktop/lock/lockprocess.cc @@ -326,10 +326,8 @@ static int signal_pipe[2]; static void sigterm_handler(int) { if (!trinity_desktop_lock_in_sec_dlg) { - char tmp = 'T'; - if (::write( signal_pipe[1], &tmp, 1) == -1) { - // Error handler to shut up gcc warnings - } + // Exit uncleanly + exit(1); } } @@ -522,7 +520,7 @@ void LockProcess::setupSignals() sigaddset(&(act.sa_mask), SIGQUIT); act.sa_flags = 0; sigaction(SIGQUIT, &act, 0L); - // exit cleanly on SIGTERM + // exit uncleanly on SIGTERM act.sa_handler= sigterm_handler; sigemptyset(&(act.sa_mask)); sigaddset(&(act.sa_mask), SIGTERM); |