]> git.ipfire.org Git - thirdparty/asterisk.git/commit
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files. master
authorThatTotallyRealMyth <106909154+ThatTotallyRealMyth@users.noreply.github.com>
Tue, 10 Jun 2025 07:18:00 +0000 (17:18 +1000)
committergithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Thu, 31 Jul 2025 14:06:31 +0000 (14:06 +0000)
commitf97361952023625e8dd49ca03454777fad19fedb
tree558feb5dbc825f0d082e47ee683e06d5a86ba44a
parent43bf8a4ded7a65203b766b91eaf8331a600e9d8d
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files.

UpgradeNote: The safe_asterisk script now checks that, if it was run by the
root user, the /etc/asterisk/startup.d directory and all the files it contains
are owned by root.  If the checks fail, safe_asterisk will exit with an error
and Asterisk will not be started.  Additionally, the default logging
destination is now stderr instead of tty "9" which probably won't exist
in modern systems.

Resolves: #GHSA-v9q8-9j8m-5xwp
contrib/scripts/safe_asterisk