sssd.git/src/tools, branch ldapdebug

Unchecked return value in files.c

2013-01-29T15:02:34+00:00

Found by coverity.
https://fedorahosted.org/sssd/ticket/1791

TOOLS: Compile on old platforms such as RHEL5

2013-01-28T15:09:18+00:00

Provides compatible declarations for modern file management functions
such as futimens or opening with the O_CLOEXEC flag

TOOLS: Use file descriptor to avoid races when creating a home directory

2013-01-23T13:27:58+00:00

When creating a home directory, the destination tree can be modified in
various ways while it is being constructed because directory permissions
are set before populating the directory. This can lead to file creation
and permission changes outside the target directory tree, using hard links.

This security problem was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

TOOLS: Use openat/unlinkat when removing the homedir

2013-01-23T13:27:58+00:00

The removal of a home directory is sensitive to concurrent modification
of the directory tree being removed and can unlink files outside the
directory tree.

This security issue was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

TOOLS: invalidate parent groups in memory cache, too

2013-01-21T15:09:41+00:00

https://fedorahosted.org/sssd/ticket/1775

In addition to invalidating the group being added to when adding a
member group/user, we also need to invalidate all its parent groups,
otherwise this getgrnam("parent") wouldn't report the members newly
added to its child groups.

tools: Respect use_fully_qualified_names

2013-01-16T14:40:19+00:00

Tools for LOCAL domain should require FQDN if option
'use_fuly_quallified_names = TRUE' was configured.

https://fedorahosted.org/sssd/ticket/1746

sss_cache: Call DEBUG_INIT sooner

2013-01-16T14:35:55+00:00

If bad parameteres were passed to sss_cache, the init
function returned without calling DEBUG_INIT macro and
unnecessary level 1 debug message was printed.

https://fedorahosted.org/sssd/ticket/1745

TOOLS: Refresh memcache after changes to local users and groups

2013-01-15T19:16:05+00:00

TOOLS: Provide a convenience function to refresh a list of groups

2013-01-15T19:16:04+00:00

TOOLS: Split querying nss responder into a separate function

2013-01-15T19:16:04+00:00

The tools query the responder in order to sync the memcache after
performing changes to the local database. The functions will be reused
by other tools so I split them into a separate functions.