xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

stats: get rid of the legacy import fallback

Browse source 
using legacy import is dangerious as it is unencrypted by default,
so a man in the middle can force the fallback to import protocol
and then take over the connection to the remote machine gaining
full access to is.
This commit is contained in:
cinap_lenrek 2017-06-08 09:08:59 +02:00
parent b4a9468fdd
commit 1013779e74
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sys/src/cmd/stats.c
View file

@ -548,7 +548,6 @@ initmach(Machine *m, char *name)
int pid;
snprint(mpt, sizeof mpt, "/n/%s", p);
snprint(buf, sizeof buf, "rimport %q / %q || import %q / %q", name, mpt, name, mpt);
pid = fork();
switch(pid){
@ -556,7 +555,7 @@ initmach(Machine *m, char *name)
fprint(2, "can't fork: %r\n");
return 0;
case 0:
execl("/bin/rc", "rc", "-c", buf, nil);
execl("/bin/rimport", "rimport", name, "/", mpt, nil);
fprint(2, "can't exec: %r\n");
exits("exec");
}