sssd.git/src/tools, branch 1.9.2-88

TOOLS: Use file descriptor to avoid races when creating a home directory

2013-01-23T14:24:43+00:00

When creating a home directory, the destination tree can be modified in
various ways while it is being constructed because directory permissions
are set before populating the directory. This can lead to file creation
and permission changes outside the target directory tree, using hard links.

This security problem was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

TOOLS: Use openat/unlinkat when removing the homedir

2013-01-23T14:24:39+00:00

The removal of a home directory is sensitive to concurrent modification
of the directory tree being removed and can unlink files outside the
directory tree.

This security issue was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

TOOLS: invalidate parent groups in memory cache, too

2013-01-21T15:26:28+00:00

https://fedorahosted.org/sssd/ticket/1775

TOOLS: Refresh memcache after changes to local users and groups

2013-01-15T19:55:53+00:00

TOOLS: Provide a convenience function to refresh a list of groups

2013-01-15T19:55:50+00:00

TOOLS: Split querying nss responder into a separate function

2013-01-15T19:55:47+00:00

The tools query the responder in order to sync the memcache after
performing changes to the local database. The functions will be reused
by other tools so I split them into a separate functions.

TOOLS: move memcache related functions to tools_mc_utils.c

2013-01-15T19:55:42+00:00

The upcoming patches will link only users of this file with client libs,
so it's better to have it separate.

There is no functional change in this patch

Fix invalidating autofs maps

2013-01-15T19:55:39+00:00

sss_cache: fqdn not accepted

2013-01-04T16:15:43+00:00

sss_cache did not accept fully quaified domain names.

https://fedorahosted.org/sssd/ticket/1620

sss_cache: Small refactor.

2013-01-04T16:15:40+00:00

The logic that checks if sssd_nss is running and then
sends SIGHUP to monitor or removes the caches was moved
to a function sss_memcache_clear_all() and made public in
tools_util.h.