]> git.ipfire.org Git - thirdparty/asterisk.git/commit
manager.c: Restrict ModuleLoad to the configured modules directory.
authorBen Ford <bford@digium.com>
Wed, 25 Sep 2024 18:05:58 +0000 (13:05 -0500)
committerBen Ford <bford@digium.com>
Mon, 30 Sep 2024 16:28:40 +0000 (16:28 +0000)
commit98380812c0d8fdd74e604bde5fb175e7f4c67cef
treeb6fb1ad497ac668260913b0265f0687d91710b0b
parent5bd7403fed723aa2837b531f3121183dbb88e8eb
manager.c: Restrict ModuleLoad to the configured modules directory.

When using the ModuleLoad AMI action, it was possible to traverse
upwards through the directories to files outside of the configured
modules directory. We decided it would be best to restrict access to
modules exclusively in the configured directory. You will now get an
error when the specified module is outside of this limitation.

Fixes: #897
UserNote: The ModuleLoad AMI action now restricts modules to the
configured modules directory.
main/manager.c