sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-04-05	Further restrict become_user drop of privileges.	Simo Sorce	1	-15/+18
	We never need to regain root after we call become_user() so tighten up even further our privilege drop. Add a setgroups() call to remove all secondary groups root may have been given for whateve reason. Then use the setres[ug]id function to also drop the saved uid/gid so the process cannot regain back root id. Capabilities are also implicitly dropped here, no more CAP_SETUID so this is a Point of No Return, once changed to non-root the process can't get back. Remove redefinition of sys/types.h and unistd.h, they are already defined in util.h and they need to be included after _GNU_SOURCE/_BSD_SOURCE is defined or the prototypes for setres[ug]id will not be found. Add grp.h after util.h for the same reason.
2012-11-26	Save errno before it might be modified.	Simo Sorce	1	-8/+16
	The DEBUG() macro may, at any time, change and start calling functions that touch errno. Save errno before logging and then return the saved error.
2012-06-14	Add a credential cache back end structure	Jakub Hrozek	1	-1/+1
	To be able to add support for new credential cache types easily, this patch creates a new structure sss_krb5_cc_be that defines common operations with a credential cache, such as create, check if used or remove.
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+61
	Also update BUILD.txt