diff options
| author | Werner Koch <[email protected]> | 2004-10-13 18:10:06 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2004-10-13 18:10:06 +0000 |
| commit | 151ca81f1a5a03ae83d9c14ab7748a2d3c09919e (patch) | |
| tree | 38cc8933051a1e45cd3e95cd8cc66746290f7e31 /g10/verify.c | |
| parent | Add dearmor.c (diff) | |
| download | gnupg-151ca81f1a5a03ae83d9c14ab7748a2d3c09919e.tar.gz gnupg-151ca81f1a5a03ae83d9c14ab7748a2d3c09919e.zip | |
Added SELInux hacks and did some cleanups.
Diffstat (limited to 'g10/verify.c')
| -rw-r--r-- | g10/verify.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/g10/verify.c b/g10/verify.c index 24e140b26..df60b7d71 100644 --- a/g10/verify.c +++ b/g10/verify.c @@ -91,6 +91,12 @@ verify_signatures( int nfiles, char **files ) /* open the signature file */ fp = iobuf_open(sigfile); + if (fp && is_secured_file (iobuf_get_fd (fp))) + { + iobuf_close (fp); + fp = NULL; + errno = EPERM; + } if( !fp ) { log_error(_("can't open `%s'\n"), print_fname_stdin(sigfile)); return G10ERR_OPEN_FILE; @@ -137,6 +143,12 @@ verify_one_file( const char *name ) print_file_status( STATUS_FILE_START, name, 1 ); fp = iobuf_open(name); + if (fp && is_secured_file (iobuf_get_fd (fp))) + { + iobuf_close (fp); + fp = NULL; + errno = EPERM; + } if( !fp ) { print_file_status( STATUS_FILE_ERROR, name, 1 ); log_error(_("can't open `%s'\n"), print_fname_stdin(name)); |