emo
/
shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity
shadow/lib
History
Vinícius dos Santos Oliveira 05e2adf509 Validate fds created by the user 
write_mapping() will do the following:

openat(proc_dir_fd, map_file, O_WRONLY);

An attacker could create a directory containing a symlink named
"uid_map" pointing to any file owned by root, and thus allow him to
overwrite any root-owned file.
 		2023-02-24 16:20:57 -06:00
..
.indent.pro
…
Makefile.am Assume getutent(3) exists (remove dead code) 2023-02-08 17:21:34 +01:00
alloc.h libmisc: Add safer allocation macros 2023-02-23 20:28:43 -06:00
bit.h lib: bit_ceil_wrapul(): stop recursion 2023-02-24 12:44:14 -06:00
commonio.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
commonio.h changing lock mechanism 2022-12-29 13:58:49 -06:00
defines.h lib/defines.h: Add NORETURN attribute macro 2023-02-08 22:01:01 -06:00
encrypt.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
exitcodes.h Update licensing info 2021-12-23 19:36:50 -06:00
faillog.h Update licensing info 2021-12-23 19:36:50 -06:00
fields.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
fputsx.c Update licensing info 2021-12-23 19:36:50 -06:00
get_gid.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
get_pid.c Validate fds created by the user 2023-02-24 16:20:57 -06:00
get_uid.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
getdef.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
getdef.h Update licensing info 2021-12-23 19:36:50 -06:00
getlong.c Update licensing info 2021-12-23 19:36:50 -06:00
getulong.c Update licensing info 2021-12-23 19:36:50 -06:00
groupio.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
groupio.h Update licensing info 2021-12-23 19:36:50 -06:00
groupmem.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
gshadow.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
gshadow_.h Update licensing info 2021-12-23 19:36:50 -06:00
lockpw.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
mempcpy.h Add mempcpy(3) 2023-02-16 11:29:33 +01:00
nscd.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
nscd.h
…
nss.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
pam_defs.h Declare constant data structure const 2023-01-25 12:31:17 +01:00
port.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
port.h Update licensing info 2021-12-23 19:36:50 -06:00
prototypes.h newuidmap and newgidmap: support passing pid as fd 2023-02-24 12:35:49 -06:00
pwauth.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
pwauth.h Add header guards 2022-05-24 07:49:11 -05:00
pwio.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
pwio.h Update licensing info 2021-12-23 19:36:50 -06:00
pwmem.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
run_part.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
run_part.h Add header guards 2022-05-24 07:49:11 -05:00
selinux.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
semanage.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
sgetgrent.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
sgetpwent.c Raise limit for passwd and shadow entry length 2022-10-14 10:41:40 +02:00
sgetspent.c Don't redefine errno(3) 2022-12-22 11:43:29 +01:00
sgroupio.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
sgroupio.h Update licensing info 2021-12-23 19:36:50 -06:00
shadow.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
shadowio.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
shadowio.h Update licensing info 2021-12-23 19:36:50 -06:00
shadowlog.c lib: provide default values for shadow_progname/shadow_logfd 2021-12-27 16:28:23 +00:00
shadowlog.h Drop obsolete prototype for log_dolog() 2022-08-06 11:27:56 -05:00
shadowlog_internal.h Fix typos 2023-01-26 22:44:39 -06:00
shadowmem.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
spawn.c Merge pull request #451 from hallyn/2021-12-05/license 2022-01-02 18:38:42 -06:00
sssd.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
sssd.h
…
stpecpy.h Add stpecpy() 2023-02-16 11:29:33 +01:00
stpeprintf.h Add stpeprintf() 2023-02-16 11:29:33 +01:00
subordinateio.c Use safer allocation macros 2023-02-23 20:28:43 -06:00
subordinateio.h fix newusers when nss provides subids 2021-05-23 08:16:16 -05:00
tcbfuncs.c Remove superfluous casts 2023-02-09 10:03:03 -06:00
tcbfuncs.h
…