public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Peng Huang <phuang@fedoraproject.org>
To: git-commits@fedoraproject.org
Subject: [rpms/ibus] autotool: Update ibus-HEAD.patch to improve security
Date: Sun, 31 May 2026 02:04:17 GMT	[thread overview]
Message-ID: <178019305773.1.15629108595390835490.rpms-ibus-d78a8088ee07@fedoraproject.org> (raw)

A new commit has been pushed.

Repo   : rpms/ibus
Branch : autotool
Commit : d78a8088ee0719cde93b119ce785b30c2787a22c
Author : Peng Huang <phuang@fedoraproject.org>
Date   : 2009-04-14T09:06:25+00:00
Stats  : +26/-3 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/ibus/c/d78a8088ee0719cde93b119ce785b30c2787a22c?branch=autotool

Log:
Update ibus-HEAD.patch to improve security

---
diff --git a/ibus-HEAD.patch b/ibus-HEAD.patch
index e69de29..8393ed1 100644
--- a/ibus-HEAD.patch
+++ b/ibus-HEAD.patch
@@ -0,0 +1,19 @@
+diff --git a/bus/server.c b/bus/server.c
+index 7245bd3..425dd86 100644
+--- a/bus/server.c
++++ b/bus/server.c
+@@ -90,10 +90,13 @@ bus_server_listen (BusServer *server)
+     gboolean retval;
+ 
+     path = g_strdup_printf("/tmp/ibus-%s", ibus_get_user_name ());
+-    mkdir (path, 0775);
++    mkdir (path, 0700);
++    chmod (path, 0700);
++
+     address = ibus_get_address ();
+ 
+     retval = ibus_server_listen (IBUS_SERVER (server), address);
++    chmod (ibus_get_socket_path (), 0600);
+ 
+     if (!retval) {
+         g_printerr ("Can not listen on %s! Please try remove directory %s and run again.", address, path);

diff --git a/ibus.spec b/ibus.spec
index 4e3f447..5f3f776 100644
--- a/ibus.spec
+++ b/ibus.spec
@@ -8,7 +8,7 @@
 
 Name:       ibus
 Version:    1.1.0.20090413
-Release:    1%{?dist}
+Release:    2%{?dist}
 Summary:    Intelligent Input Bus for Linux OS
 License:    LGPLv2+
 Group:      System Environment/Libraries
@@ -105,8 +105,7 @@ docs for ibus.
 
 %prep
 %setup -q
-# rm -rf docs/reference/ibus/ibus-sections.txt
-# %patch0 -p1
+%patch0 -p1
 # ./autogen.sh --help
 
 %build
@@ -218,6 +217,11 @@ fi
 %{_libdir}/pkgconfig/*
 
 %changelog
+* Tue Apr 14 2009 Huang Peng <shawn.p.huang@gmail.com> - 1.1.0.20090413-2
+- Update ibus-HEAD.patch.
+- Change the mode of /tmp/ibus-$USER to 0700 to improve security
+- Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
+
 * Mon Apr 13 2009 Huang Peng <shawn.p.huang@gmail.com> - 1.1.0.20090413-1
 - Update to ibus-1.1.0.20090413.
 - Fix crash when restart the ibus-daemon

                 reply	other threads:[~2026-05-31  2:04 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178019305773.1.15629108595390835490.rpms-ibus-d78a8088ee07@fedoraproject.org \
    --to=phuang@fedoraproject.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox