]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Move private file access checks to options_postprocess_filechecks()
authorSteffan Karger <steffan@karger.me>
Sun, 13 Nov 2016 14:02:31 +0000 (15:02 +0100)
committerDavid Sommerseth <davids@openvpn.net>
Mon, 14 Nov 2016 21:14:32 +0000 (22:14 +0100)
commit825e2ec1f358f2e81b623f2770fbbf76748b0739
tree1eb7bc416bb1d38ac5d8a753b8e0da604df1b2dd
parentac42df1a2e53e84c67397989df3f0650bed3ae7a
Move private file access checks to options_postprocess_filechecks()

This removes the dependency of crypto.c on misc.c, which makes testing
(stuff that needs) crypto.c functionality easier.

Apart from that, testing file access really belongs in
options_postprocess_filechecks(), and moving it there enables us to
perform the same check for other private files too.

v2: change indenting, remove remaining warn_if_group_others_accessible()
    calls and move function to options.c.

[ DS: This patch is a slightly modified version of the one sent to the
     mailing list. It removes all references to --tls-crypt, so it
     can be applied eariler to the tree as it contains a good clean-up
     as well ]

Signed-off-by: Steffan Karger <steffan.karger@fox-it.com>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <1479045751-22297-1-git-send-email-steffan.karger@fox-it.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13019.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
src/openvpn/crypto.c
src/openvpn/misc.c
src/openvpn/misc.h
src/openvpn/options.c
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_openssl.c