]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ModuleLoad to the configured modules directory.
authorBen Ford <bford@digium.com>
Wed, 25 Sep 2024 18:05:58 +0000 (13:05 -0500)
committerAsterisk Development Team <asteriskteam@digium.com>
Thu, 14 Nov 2024 20:00:45 +0000 (20:00 +0000)
commitaaa594fb64bc7cf526066539d14d18d0716285a2
tree305e051e9026c46ca72965ce8cf68b24e2641982
parent003be5aff0b5e7b33d3aa821be87a3889b853af0
manager.c: Restrict ModuleLoad to the configured modules directory.

When using the ModuleLoad AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
modules directory. We decided it would be best to restrict access to
modules exclusively in the configured directory. You will now get an
error when the specified module is outside of this limitation.

Fixes: #897
UserNote: The ModuleLoad AMI action now restricts modules to the
configured modules directory.

(cherry picked from commit 5a237235c00a3a408ddb65874f39dab76f3824cf)
main/manager.c