selinux/policycoreutils/semodule
Christian Göttsche 6d02b2fa29 semodule: avoid toctou on output module
Do not check for file existence and open afterwards, open with the
exclusive flag (supported in Glibc and musl 0.9.6 and also standardized
in C11).

Found by GitHub CodeQL.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2022-06-02 08:31:07 -04:00
..
ru Add man pages translation by Olesya Gerasimenko 2019-01-28 12:03:57 +01:00
.gitignore Ignore genhomedircon link. 2013-10-24 15:11:01 -04:00
genhomedircon.8 semodule: mention ignoredirs setting in genhomedircon man page 2020-04-28 09:27:49 +02:00
Makefile semodule,libsemanage: move module hashing into libsemanage 2022-02-18 11:08:30 -05:00
semodule.8 semodule: add command-line option to detect module changes 2022-02-18 11:08:41 -05:00
semodule.c semodule: avoid toctou on output module 2022-06-02 08:31:07 -04:00