Alexander Bokovoy 0591de367f ipa tools: remove sensitive material from the commandline ...

When command line tools accept passwords, remove them from the command
line so that they don't get visible in '/proc/pid/commandline'.

There is no common method to access the original ARGV vector and modify
it from Python. Since this mostly affects Linux systems where IPA
services run, we expect use of GNU libc and thus can rely on internal
glibc symbols. If they aren't available, the code will skip removing
passwords.

Fixes: CVE-2024-11029

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

2025-01-15 12:18:46 +01:00

..

etc

ipa config: add --enable-sid option

2021-11-02 10:11:28 +01:00

com.redhat.idm.trust-fetch-domains.in

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

Makefile.am

ipa config: add --enable-sid option

2021-11-02 10:11:28 +01:00

org.freeipa.server.config-enable-sid.in

ipa config: add --enable-sid option

2021-11-02 10:11:28 +01:00

org.freeipa.server.conncheck

Do not log to file in remote conncheck side

2016-07-01 09:05:33 +02:00

org.freeipa.server.trust-enable-agent.in

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00