Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-12-19 | Securely set umask when using mkstemp | Stephen Gallagher | 1 | -0/+4 | |
Coverity 12394, 12395, 12396, 12397 and 12398 | |||||
2011-10-13 | Add option to follow symlinks to check_file() | Jakub Hrozek | 1 | -1/+28 | |
2010-06-14 | Print correct return code | Jakub Hrozek | 1 | -1/+1 | |
Fixes: #535 | |||||
2010-04-06 | Protect against check-and-open race conditions | Stephen Gallagher | 1 | -2/+2 | |
There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file. | |||||
2010-03-04 | Add --with-test-dir option to configure | Stephen Gallagher | 1 | -0/+4 | |
All 'make check' tests will chdir() into this directory before running the suite. This provides the option of having temporary files generated in a tmpfs or ramdisk | |||||
2010-02-23 | Check and set permissions on SBUS sockets | Sumit Bose | 1 | -8/+9 | |
2010-02-18 | Rename server/ directory to src/ | Stephen Gallagher | 1 | -0/+218 | |
Also update BUILD.txt |