[openssl-commits] [openssl] master update

[Rich Salz]

The branch master has been updated
       via  b6d3cb543c2e91aa6820cde637db55ad1cee525f (commit)
      from  b8cba00807e6dd766b7bcdd3656e250e05dbe56f (commit)


- Log -----------------------------------------------------------------
commit b6d3cb543c2e91aa6820cde637db55ad1cee525f
Author: Rich Salz <rsalz at akamai.com>
Date:   Mon May 4 07:52:27 2015 -0400

    RT1369: don't do "helpful" access check.
    
    Don't do access check on destination directory; it breaks when euid/egid
    is different from real uid/gid.
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Signed-off-by: Rich Salz <rsalz at akamai.com>

-----------------------------------------------------------------------

Summary of changes:
 apps/ca.c | 21 +++++----------------
 1 file changed, 5 insertions(+), 16 deletions(-)

diff --git a/apps/ca.c b/apps/ca.c
index 2f43a9b..b6cf47f 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -703,24 +703,13 @@ end_of_options:
 #ifndef OPENSSL_SYS_VMS
         /*
          * outdir is a directory spec, but access() for VMS demands a
-         * filename.  In any case, stat(), below, will catch the problem if
-         * outdir is not a directory spec, and the fopen() or open() will
-         * catch an error if there is no write access.
-         *
-         * Presumably, this problem could also be solved by using the DEC C
-         * routines to convert the directory syntax to Unixly, and give that
-         * to access().  However, time's too short to do that just now.
+         * filename.  We could use the DEC C routine to convert the
+         * directory syntax to Unixly, and give that to app_isdir,
+         * but for now the fopen will catch the error if it's not a
+         * directory
          */
-        if (app_access(outdir, R_OK | W_OK | X_OK) != 0)
-        {
-            BIO_printf(bio_err, "I am unable to access the %s directory\n",
-                       outdir);
-            perror(outdir);
-            goto end;
-        }
-
         if (app_isdir(outdir) <= 0) {
-            BIO_printf(bio_err, "%s need to be a directory\n", outdir);
+            BIO_printf(bio_err, "%s: %s is not a directory\n", prog, outdir);
             perror(outdir);
             goto end;
         }