Christian Heimes 53e0b2255d ipa-getkeytab: resolve symlink ...

Resolve one level of symbolic links to support a dangling symlink as
keytab target. To prevent symlink attacks, only resolve symlink when the
symlink is owned by the current effective user and group, or by root.

Fixes: https://pagure.io/freeipa/issue/4607
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2019-01-30 08:06:02 +01:00

..

man

Return unique error when automount is already or not configured

2018-05-16 11:32:29 -04:00

share

Move client templates to separate directory

2018-06-05 16:34:27 -04:00

config.c

Fix ressource leak in client/config.c get_config_entry

2018-10-23 16:45:22 +02:00

ipa-certupdate.in

Rename Python scripts and add dynamic shebang

2018-08-23 14:49:06 +02:00

ipa-client-automount.in

ipa-client-automount: use nfs-utils unit

2018-12-14 10:15:04 +01:00

ipa-client-common.c

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-client-common.h

Migrate from #ifndef guards to #pragma once

2016-05-29 14:04:45 +02:00

ipa-client-install.in

Rename Python scripts and add dynamic shebang

2018-08-23 14:49:06 +02:00

ipa-getkeytab.c

ipa-getkeytab: resolve symlink

2019-01-30 08:06:02 +01:00

ipa-join.c

Enable LDAP debug output in client to display TLS errors in join

2018-10-12 16:55:52 -04:00

ipa-rmkeytab.c

ipa-rmkeytab, ipa-join: don't fail if init of gettext failed

2016-06-27 12:34:18 +02:00

Makefile.am

Generate scripts from templates

2018-08-23 14:49:06 +02:00

version.m4.in

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00