]> git.ipfire.org Git - thirdparty/shadow.git/commit
src/: Hardcode Prog to known value
authorSkyler Ferrante <sjf5462@rit.edu>
Sun, 3 Mar 2024 05:54:05 +0000 (00:54 -0500)
committerAlejandro Colomar <alx@kernel.org>
Thu, 7 Mar 2024 21:54:04 +0000 (22:54 +0100)
commita28371336e17a22c6959f40b4647b8e54923c433
tree08147c408bfc742079609e09954ec002241b6e4f
parent71080e790011f2bce502b26ba1463e42cb2212fe
src/: Hardcode Prog to known value

Set Prog (program name) based on hardcoded value instead of argv[0].
This is to help prevent escape sequence injection.

Cherry-picked-from: e6c2e4393784 ("Hardcoding Prog to known value")
Link: <https://github.com/shadow-maint/shadow/issues/959>
Link: <https://github.com/shadow-maint/shadow/pull/960>
Cc: "Skyler Ferrante (RIT Student)" <sjf5462@rit.edu>
Cc: "Serge E. Hallyn" <serge@hallyn.com>
Cc: Karel Zak <kzak@redhat.com>
Cc: Iker Pedrosa <ipedrosa@redhat.com>
Cc: Christian Brauner <christian@brauner.io>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
37 files changed:
src/chage.c
src/check_subid_range.c
src/chfn.c
src/chgpasswd.c
src/chpasswd.c
src/chsh.c
src/expiry.c
src/faillog.c
src/free_subid_range.c
src/get_subid_owners.c
src/getsubids.c
src/gpasswd.c
src/groupadd.c
src/groupdel.c
src/groupmems.c
src/groupmod.c
src/groups.c
src/grpck.c
src/grpconv.c
src/grpunconv.c
src/lastlog.c
src/login.c
src/logoutd.c
src/new_subid_range.c
src/newgidmap.c
src/newgrp.c
src/newuidmap.c
src/newusers.c
src/passwd.c
src/pwck.c
src/pwconv.c
src/pwunconv.c
src/su.c
src/sulogin.c
src/useradd.c
src/userdel.c
src/usermod.c