With _FORTIFY_SOURCE and optimization, glibc defines a fortify_function for open...

diff --git a/data/src/pmxcfs.c b/data/src/pmxcfs.c
index bea2c47b11137c37623480149196a24362c98f19..d74d2c2cae33c732c6e915af9b7c7356766eac26 100644 (file)
--- a/data/src/pmxcfs.c
+++ b/data/src/pmxcfs.c
@@ -817,7 +817,7 @@ int main(int argc, char *argv[])
 
        mkdir(VARLIBDIR, 0755);
 
-       if ((lockfd = open(LOCKFILE, O_RDWR|O_CREAT|O_APPEND)) == -1) {
+       if ((lockfd = open(LOCKFILE, O_RDWR|O_CREAT|O_APPEND, 0600)) == -1) {
                cfs_critical("unable to create lock '%s': %s", LOCKFILE, strerror (errno));
                goto err;
        }