qga: set umask 0077 when daemonizing (CVE-2013-2007)

[qemu.git] / qga / main.c

diff --git a/qga/main.c b/qga/main.c
index 1841759db270295c96262f215f92b408ac6f472c..44a283686bbf870a4a1adaa19a9d78f4c3a31108 100644 (file)
--- a/qga/main.c
+++ b/qga/main.c
@@ -478,7 +478,7 @@ static void become_daemon(const char *pidfile)
         }
     }
 
-    umask(0);
+    umask(S_IRWXG | S_IRWXO);
     sid = setsid();
     if (sid < 0) {
         goto fail;