diff options
| author | Sam Hartman <hartmans@mit.edu> | 1996-05-19 18:52:51 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 1996-05-19 18:52:51 +0000 |
| commit | f7ef18fa8444d74f7ad6e3c1ae6804ef00b24f79 (patch) | |
| tree | 2f20cec634a357172881ac841f1f2c2868fe9e65 /src/include/ChangeLog | |
| parent | 1a813ae6f7d501c123fdd3ce748c3b94ba241e8d (diff) | |
| download | krb5-f7ef18fa8444d74f7ad6e3c1ae6804ef00b24f79.tar.gz krb5-f7ef18fa8444d74f7ad6e3c1ae6804ef00b24f79.tar.xz krb5-f7ef18fa8444d74f7ad6e3c1ae6804ef00b24f79.zip | |
Significant security fixes to ksu
* Use source euid all throughout procedure of opening source ccache,
Richard's code had a race condition.
* Use target euid while looking up .k5login and constructing target ccache.
* Avoid chowns completely; they create race conditions. Fchown could
have been used if we wanted to be really careful, but they aren't
necessary and we would have to violate abstractions.
* Clean up several conditions that would allow users to delete
arbitrary files of the user they were ksuing to without authorization.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8049 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include/ChangeLog')
0 files changed, 0 insertions, 0 deletions