]> git.ipfire.org Git - thirdparty/shadow.git/commit
Avoid races in chown_tree()
authorChristian Göttsche <cgzones@googlemail.com>
Fri, 5 Aug 2022 15:57:19 +0000 (17:57 +0200)
committerSerge Hallyn <serge@hallyn.com>
Wed, 17 Aug 2022 17:34:01 +0000 (12:34 -0500)
commite9ae247cb14f977d8881f481488843b10665dba8
treeb1901a5faa02f3257bd48b131fb23e3adb3a8b4f
parent4b3dde0b11314266c92e33cd9e95c28d4ea5d586
Avoid races in chown_tree()

Use *at() functions to pin the directory operating in to avoid being
redirected by unprivileged users replacing parts of paths by symlinks to
privileged files.
libmisc/chowndir.c