diff options
| author | Ondrej Kos <okos@redhat.com> | 2013-01-29 14:15:48 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-01-29 16:18:18 +0100 |
| commit | cfcfa9bd014a7717821c98262a11772c8e79c13e (patch) | |
| tree | 3a17519433808dd5f43373da2796123075cd1d83 /scripts | |
| parent | 2b0c414b919ec75be2bcfcca850ef309760816d3 (diff) | |
| download | sssd-cfcfa9bd014a7717821c98262a11772c8e79c13e.tar.gz sssd-cfcfa9bd014a7717821c98262a11772c8e79c13e.tar.xz sssd-cfcfa9bd014a7717821c98262a11772c8e79c13e.zip | |
TOOLS: Use file descriptor to avoid races when creating a home directory
When creating a home directory, the destination tree can be modified in
various ways while it is being constructed because directory
permissions
are set before populating the directory. This can lead to file creation
and permission changes outside the target directory tree, using hard
links.
This security problem was assigned CVE-2013-0219
https://fedorahosted.org/sssd/ticket/1782
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions