]> git.ipfire.org Git - thirdparty/asterisk.git/commit
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files.
authorThatTotallyRealMyth <106909154+ThatTotallyRealMyth@users.noreply.github.com>
Tue, 10 Jun 2025 07:18:00 +0000 (17:18 +1000)
committerThatTotallyRealMyth <106909154+ThatTotallyRealMyth@users.noreply.github.com>
Thu, 31 Jul 2025 14:06:22 +0000 (14:06 +0000)
commita8305496335de67e797bcb6e7f96f4cea19e12ab
treec1b2ae8d4b1cc882b34501c8f62f3dfd90a5ca22
parented2dbfec9d0764db69e384c488f1d16a58ee7c86
safe_asterisk: Add ownership checks for /etc/asterisk/startup.d and its files.

UpgradeNote: The safe_asterisk script now checks that, if it was run by the
root user, the /etc/asterisk/startup.d directory and all the files it contains
are owned by root.  If the checks fail, safe_asterisk will exit with an error
and Asterisk will not be started.  Additionally, the default logging
destination is now stderr instead of tty "9" which probably won't exist
in modern systems.

Resolves: #GHSA-v9q8-9j8m-5xwp
contrib/scripts/safe_asterisk