943N/A# Copyright (c) 2006, 2007, Oracle
and/or its affiliates. All rights reserved.
90N/A# Permission is hereby granted, free of charge, to any person obtaining a
919N/A# copy of this software and associated documentation files (the "Software"),
919N/A# to deal in the Software without restriction, including without limitation
919N/A# the rights to use, copy, modify, merge, publish, distribute, sublicense,
919N/A#
and/or sell copies of the Software, and to permit persons to whom the
919N/A# Software is furnished to do so, subject to the following conditions:
919N/A# The above copyright notice and this permission notice (including the next
919N/A# paragraph) shall be included in all copies or substantial portions of the
919N/A# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
919N/A# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
919N/A# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
919N/A# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
919N/A# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
919N/A# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
919N/A# DEALINGS IN THE SOFTWARE.
90N/AAdditional security checks for setuid programs that
X.Org upstream doesn't
1072N/A@@ -161,7 +161,15 @@ xpmPipeThrough(
90N/A- execlp(cmd, cmd, arg1, (char *)NULL);
90N/A+/* #ifdef SUNSOFT */
90N/A+ if (issetugid()) {
90N/A+ strlcat(commandpath, cmd, sizeof(commandpath));
90N/A+ execl(commandpath, cmd, arg1, NULL);
90N/A+ execlp(cmd, cmd, arg1, NULL);