]> git.ipfire.org Git - thirdparty/asterisk.git/commit
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files.
authorThatTotallyRealMyth <106909154+ThatTotallyRealMyth@users.noreply.github.com>
Tue, 10 Jun 2025 07:18:00 +0000 (17:18 +1000)
committerGeorge Joseph <gjoseph@sangoma.com>
Thu, 31 Jul 2025 14:46:48 +0000 (08:46 -0600)
commit96cf832bca5decbf1790e6244dc2cc41872bf3d7
treec1122958f05dde0e80a0648e0b68e0e8e12f9f60
parent4f835a2c11a5748a34fd771b9ca472f37979aadc
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files.

UpgradeNote: The safe_asterisk script now checks that, if it was run by the
root user, the /etc/asterisk/startup.d directory and all the files it contains
are owned by root.  If the checks fail, safe_asterisk will exit with an error
and Asterisk will not be started.  Additionally, the default logging
destination is now stderr instead of tty "9" which probably won't exist
in modern systems.

Resolves: #GHSA-v9q8-9j8m-5xwp
contrib/scripts/safe_asterisk