sssd.git/src/tools, branch srvbackport

TOOLS: Compile on old platforms such as RHEL5

2013-02-11T14:45:10+00:00

Provides compatible declarations for modern file management functions
such as futimens or opening with the O_CLOEXEC flag

TOOLS: Use file descriptor to avoid races when creating a home directory

2013-02-11T14:45:10+00:00

When creating a home directory, the destination tree can be modified in
various ways while it is being constructed because directory
permissions
are set before populating the directory. This can lead to file creation
and permission changes outside the target directory tree, using hard
links.

This security problem was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

TOOLS: Use openat/unlinkat when removing the homedir

2013-02-11T14:45:10+00:00

The removal of a home directory is sensitive to concurrent modification
of the directory tree being removed and can unlink files outside the
directory tree.

This security issue was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

Replace system() function with fork and execl call.

2011-07-05T12:02:21+00:00

This is much more selinux friendly as it allows policy makers to call
nscd_domtrans to transition to nscd_t instead of giving more access to
the system via the corcmd_exec_bin macro.

Modified-by: Simo Sorce 

Signed-off-by: Simo Sorce

sss_obfuscate: abort on ctrl+c

2011-03-24T18:14:02+00:00

There is a python bug (http://bugs.python.org/issue11236) where
getpass.getpass() does not throw KeyboardInterrupt on ctrl+c. This
workaround is the closest we can get: if we detect the control
character in the string that we read, we'll cancel.

sss_obfuscate: Avoid traceback on ctrl+d

2011-03-24T18:14:02+00:00

removing password option functionality

2011-02-03T17:18:33+00:00

Gracefully handle permission errors in sss_obfuscate

2011-02-03T17:17:52+00:00

Make the domain argument mandatory in sss_obfuscate

2011-02-03T17:17:48+00:00

It doesn't make sense to set a "default" domain. We should require
that the domain always be specified.

Fix usability of sss_obfuscate command

2011-01-17T17:19:00+00:00