freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Fraser Tweedale fec4c32ff1 certprofile-mod: correctly authorise config update

Certificate profiles consist of an FreeIPA object, and a
corresponding Dogtag configuration object.  When updating profile
configuration, changes to the Dogtag configuration are not properly
authorised, allowing unprivileged operators to modify (but not
create or delete) profiles.  This could result in issuance of
certificates with fraudulent subject naming information, improper
key usage, or other badness.

Update certprofile-mod to ensure that the operator has permission to
modify FreeIPA certprofile objects before modifying the Dogtag
configuration.

https://fedorahosted.org/freeipa/ticket/6560

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-12-14 18:08:33 +01:00

advise

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dnssec

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

install

password policy: Add explicit default password policy for hosts and services

2016-12-14 17:46:12 +01:00

plugins

certprofile-mod: correctly authorise config update