chore(buglog): bug-1869 fixed (5df33e69)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Rongsong Shen 2026-09-26 08:13:24 +00:00
parent 5df33e69d9
commit 78fcacfac3
Signed by untrusted user: rshen
GPG key ID: 80533536B0EB651C

View file

@ -28134,9 +28134,9 @@
},
{
"id": "bug-1869",
"status": "open",
"status": "fixed",
"status_updated": "2026-09-26",
"status_note": "fix: O_NOFOLLOW on both, or move these files under a root-owned directory (e.g. the worker's log dir / /run)",
"status_note": "5df33e69: xcecd_open_owned_file()/xcecd_owned_file_exists() (xcecd_tmpfile.h) for the worker log, xcecd_worker.log and restart flag; fchmod instead of chmod(path).",
"timestamp": "2026-09-26T07:55:23Z",
"error_message": "Other root-owned opens of fixed /tmp names in the worker daemon follow symlinks: process_worker_manager.c opens /tmp/xcecd_worker.log O_WRONLY|O_CREAT|O_APPEND (xcecd_worker's stdout/stderr appended through a planted symlink into any file), and xcecd_prepare_restart() (xcecd.c) opens /tmp/.xcecd.restarting O_CREAT|O_WRONLY (creates an empty root-owned file at a dangling symlink's target)",
"file": "src/worker/src/process_worker_manager.c, src/worker/src/xcecd.c",