sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	P11_CHILD_NSS: More restrictive permissions	Petr Cech	2015-10-14	1	-1/+5
\| \| \| \| \| \| \| \| \| \| \|	p11_child_nss runs as root and we must be carefull about security. This patch adds more restrictive permissions on it. There is no reason for 0077, so we use 0177 umask. Resolves: https://fedorahosted.org/sssd/ticket/2424 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
*	REFACTOR: umask(077) --> umask(SSS_DFL_X_UMASK)	Petr Cech	2015-10-14	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	There are many calls of umask function with 077 argument. This patch add new constant SSS_DFL_X_UMASK which stands fot 077. So all occurences of umask(077) are replaced by constant SSS_DFL_X_UMASK. Resolves: https://fedorahosted.org/sssd/ticket/2424 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
*	p11child: set restrictive umask and clear environment	Jakub Hrozek	2015-08-17	1	-0/+3
\| \| \| \| \| \| \| \| \|	https://fedorahosted.org/sssd/ticket/2754 Before doing any calls, set a very restrictive umask and clear environment variables to harden p11child execution. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
*	Add NSS version of p11_child	Sumit Bose	2015-07-31	1	-0/+636
	Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>