summaryrefslogtreecommitdiff
path: root/src/util/check_and_open.c
AgeCommit message (Collapse)AuthorFilesLines
2011-10-13Add option to follow symlinks to check_file()Jakub Hrozek1-2/+3
2010-04-06Protect against check-and-open race conditionsStephen Gallagher1-28/+48
There is a small window between running lstat() on a filename and opening it where it's possible for the file to have been modified. We were protecting against this by saving the stat data from the original file and verifying that it was the same file (by device and inode) when we opened it again, but this is an imperfect solution, as it is still possible for an attacker to modify the permissions during this window. It is much better to simply open the file and test on the active file descriptor. Resolves https://fedorahosted.org/sssd/ticket/425 incidentally, as without the initial lstat, we are implicitly accepting symlinks and only verifying the target file.
2010-02-23Check and set permissions on SBUS socketsSumit Bose1-14/+73
2010-02-18Rename server/ directory to src/Stephen Gallagher1-0/+89
Also update BUILD.txt