/usr/libexec/security-misc/apt-get-update: use /run/helper-scripts folder for pid file instead of $TMP

to avoid permission issues
This commit is contained in:
Patrick Schleizer 2025-04-19 12:47:40 -04:00
parent 96ff7c8dc6
commit ce2c9a21a3
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -11,10 +11,9 @@ set -o pipefail
export LC_ALL=C
write_pid_file() {
[[ -z "${TMP:-}" ]] && error "TMP is unset"
safe-rm -rf "$TMP/security-misc-apt-get-update-pid"
install -m644 /dev/null "$TMP/security-misc-apt-get-update-pid"
echo "$$" | sponge -- "$TMP/security-misc-apt-get-update-pid"
safe-rm -rf "/run/helper-scripts/security-misc-apt-get-update-pid"
install -m644 /dev/null "/run/helper-scripts/security-misc-apt-get-update-pid"
echo "$$" | sponge -- "/run/helper-scripts/security-misc-apt-get-update-pid"
}
sigterm_trap() {