On Tue, 15 Sep 2026 22:06:12 +0200, Rasmus Villemoes wrote:
> Currently, the lockfile used by fw_printenv / fw_setenv is created
> with permissions 0666 minus umask, i.e. typically it ends up with 0644
> permissions.
>
> But, since it is created in a world-readable directory [/run since
> aeb40f1166e ("tools: env: use /run to store lockfile")], that means
> that any unprivileged user can subsequently open that file for
> reading, place a flock(2), and never unlock it, which is effectively a
> DOS.
>
> [...]
Applied to u-boot/main, thanks!
[1/1] fw_env: do not create lockfile with read access for others
commit: 4d96467dd86b4b75e9acc5c2ec02cdabb65e6411
--
Tom
