Commit Graph

3231 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand 847a99a0ec Check return values from setuid, prompted by MIT
advisory.  Thanks to Tom Yu at MIT, and Michael Calmer and Marcus
Meissner at SUSE.  Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17878 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:43:58 +00:00
Love Hörnquist Åstrand cd67e721c3 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17877 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:31:30 +00:00
Love Hörnquist Åstrand b42ab99857 Check for seteuid failure, prompted by MIT advisory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17876 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:31:02 +00:00
Love Hörnquist Åstrand fd6204f302 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17875 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:09:34 +00:00
Love Hörnquist Åstrand f1e2dae0f6 Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:08:46 +00:00
Love Hörnquist Åstrand 7160948ea6 Add comment by seteuid call isn't not needed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17873 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:06:11 +00:00
Love Hörnquist Åstrand 7154d3b11d Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17872 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:03:26 +00:00
Love Hörnquist Åstrand 02a8293b7e Add get_version_capa, cache target_name.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17797 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-03 10:53:21 +00:00
Love Hörnquist Åstrand 0822bf8ae4 use utname() to find the local hostname
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17796 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-03 10:52:05 +00:00
Love Hörnquist Åstrand ede9adf78c include <sys/utsname.h>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17795 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-03 10:51:37 +00:00
Love Hörnquist Åstrand fffc248c1f break out creation of a client and make handleServer pthread_create compatible
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17793 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-02 22:36:37 +00:00
Love Hörnquist Åstrand 40256ad394 break out out the build context function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17792 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-02 22:35:41 +00:00
Love Hörnquist Åstrand b18cca48b1 ignore Makefile.in
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17789 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-01 09:37:27 +00:00
Love Hörnquist Åstrand 95ee7df071 externalize slave handling, add GetTargetName glue
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17788 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-01 09:36:14 +00:00
Love Hörnquist Åstrand f409403b7d AcquireCreds: set principal to NULL to avoid memory corruption
GetTargetName: always send a string, even though we don't have a targetname


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17786 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-01 09:28:42 +00:00
Love Hörnquist Åstrand afd0ce92a8 externalize principal/password handling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17784 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-01 09:07:02 +00:00
Love Hörnquist Åstrand 88c076e738 break out common function; add gssmaestro (that only tests one context for now)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17780 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-01 08:44:30 +00:00
Love Hörnquist Åstrand 056e83995c Add gssmask
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17775 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-30 20:26:15 +00:00
Love Hörnquist Åstrand 1a7f7f4e24 split out fetching of credentials for easier reuse for pk-init testing
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17772 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-30 20:21:24 +00:00
Love Hörnquist Åstrand cbad9c5477 gssapi maggot replacement, handles context testing
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17771 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-30 20:05:42 +00:00
Love Hörnquist Åstrand 057d255d5c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17691 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-27 13:51:54 +00:00
Love Hörnquist Åstrand 4c6a364bf5 (gss_userok): create a local krb5_context and use that instead of the
libgssapi context (that might not exist).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17690 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-27 13:49:06 +00:00
Love Hörnquist Åstrand 7d627aac99 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17610 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 21:06:33 +00:00
Love Hörnquist Åstrand 6aa50f1e15 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17567 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-13 16:21:27 +00:00
Love Hörnquist Åstrand 5f8d8aa62e (main): argc_in_out argument to XtVaAppInitialize should be an 'int *'
accoring to manpage and headerfile, so remove the cast added in 1996
(rev 1.54)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17566 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-13 16:20:53 +00:00
Love Hörnquist Åstrand a997bbde9f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17451 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-05 11:16:31 +00:00
Love Hörnquist Åstrand 5118c90498 Rename u_intXX_t to uintXX_t
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17450 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-05 11:11:43 +00:00
Love Hörnquist Åstrand 4170a1fe6e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17304 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:18:09 +00:00
Love Hörnquist Åstrand 390feff0cb rshd_SOURCES += add limits_conf.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17303 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:17:54 +00:00
Love Hörnquist Åstrand b927ccbbf1 Include "loginpaths.h"
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:17:01 +00:00
Love Hörnquist Åstrand 94731a9251 Read limits from limits.conf, patch from Daniel Ahlin on non-root login.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17301 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:16:11 +00:00
Love Hörnquist Åstrand 97d0c9dd3c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17300 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:15:05 +00:00
Love Hörnquist Åstrand 7f951c53d0 Shared paths between login and rshd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17299 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:14:20 +00:00
Love Hörnquist Åstrand 7faccdb5b9 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17049 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-10 17:33:37 +00:00
Love Hörnquist Åstrand e23391e667 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16803 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-23 19:38:10 +00:00
Love Hörnquist Åstrand c01934528b Spelling.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16802 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-23 19:36:31 +00:00
Love Hörnquist Åstrand 1bb14914c1 (gss_init): add missing ; from Ted Percival
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16800 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-23 16:53:26 +00:00
Love Hörnquist Åstrand 3d2c2ccee8 Add undocument flags and spelling, from Ted Percival <Ted.Percival@quest.com>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16799 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-23 16:41:09 +00:00
Johan Danielsson 28d362af42 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16765 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-27 10:07:44 +00:00
Johan Danielsson f40b1a31f4 grammar (from Thomas Klausner)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16764 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-27 10:07:04 +00:00
Johan Danielsson 6e777c888a fix grammar in --no-insecure-oob option
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16763 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-27 10:04:53 +00:00
Johan Danielsson 053258d1a2 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16676 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-31 16:04:24 +00:00
Johan Danielsson 23f24243e1 (krb5_start_session): syslog failures to store cred cache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16675 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-31 16:04:02 +00:00
Love Hörnquist Åstrand 5736f9af51 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16651 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-24 08:17:33 +00:00
Love Hörnquist Åstrand fa19c7c28b Indent.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16650 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-24 08:16:08 +00:00
Love Hörnquist Åstrand 03009adb79 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16577 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-17 15:38:59 +00:00
Love Hörnquist Åstrand 3fcd74bc9b (group_member_p): rename from group_member to avoid name pollution
from glibc headers.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16576 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-17 15:38:18 +00:00
Johan Danielsson f906d4c919 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16531 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-12 16:37:42 +00:00
Johan Danielsson 52f388ba2f (pass): remove unused variable in the !OTP case
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16530 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-12 16:37:31 +00:00
Johan Danielsson 2699d800b9 if su:ing to root, check that user is a member of group "wheel"
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16528 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-12 16:25:01 +00:00