/mandos/release : changes

» Changes from revision 237.7.256

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

From Revision 237.7.253 to 237.7.234

expand all

Rev	Summary	Authors	Date
237.7.253	plugin-runner: Release memory and close FD's correctly in al... plugin-runner: Release memory and close FD's correctly in all cases. * plugins.d/mandos-client.c (main): Init "direntries" to NULL. Close "dir_fd" at fallback label. Do not free "direntries" if scandirat() or scandir() failed. Do free(direntries) at fallback label.	Teddy Hogeborn	10 years ago
237.7.252	mandos-client: Fix some bugs on error conditions. mandos-client: Fix some bugs on error conditions. * plugins.d/mandos-client.c (run_network_hooks): Init "dirent" to NULL and, later, always free() it unless scandirat() or scandir() failed. (main): Fix free() of uninitalized memory in case scandirat() or scandir() of "/sys/class/net" failed. Also, when cleaning up, even if GPGME temp directory is empty, do free(direntries) and remove the directory.	Teddy Hogeborn	10 years ago
237.7.251	In plugin-runner, do scandirat() or scandir() instead of rea... In plugin-runner, do scandirat() or scandir() instead of readdir(). * plugin-runner.c (set_cloexec_flag): Only define if O_CLOEXEC is not defined, it is not called otherwise. (main): Remove variables "dir" and "dirst"; new variable "dir_fd". Use scandirat() if available, scandir() otherwise, both using new filter function "good_name". Removed checking of plugin file name patterns; this is now done by "good_name". Do not set FD_CLOEXEC flag on plugin_fd, since fexecve() will not work with it. Use pipe2() to set O_CLOEXEC on pipe FD's (if possible). (main/good_name): New filter function for scandirat() or scandir().	Teddy Hogeborn	10 years ago
237.7.250	In plugin-runner, protect against a larger FD_SETSIZE than f... In plugin-runner, protect against a larger FD_SETSIZE than fd_set. * plugin-runner.c (main): Before forking, check that the first FD from pipe() does not exceed FD_SETSIZE.	Teddy Hogeborn	10 years ago
237.7.249	plugin-runner: Restore resources correctly if fork() fails. plugin-runner: Restore resources correctly if fork() fails. * plugin-runner.c (main): If fork() fails, close pipe FD's and restore signal mask for SIGCHLD.	Teddy Hogeborn	10 years ago
237.7.248	plugin-runner: Do not leak file descriptors on certain error... plugin-runner: Do not leak file descriptors on certain errors. * plugin-runner.c (main): If set_cloexec_flag fails, close pipe FD's.	Teddy Hogeborn	10 years ago
237.7.247	Fix free() of possibly uninitialized pointer in mandos-clien... Fix free() of possibly uninitialized pointer in mandos-client. * plugins.d/mandos-client (main): Initialize "direntries" to NULL so it can be free()'d even if scandir() fails.	Teddy Hogeborn	10 years ago
237.7.246	Fix mandos server "--servicename" option, broken since 1.6.4... Fix mandos server "--servicename" option, broken since 1.6.4. * mandos (initlogger): Make "syslogger" a global variable again.	Teddy Hogeborn	10 years ago
237.7.245	Address a very theoretical possible security issue in mandos... Address a very theoretical possible security issue in mandos-client. If there were to run some sort of "cleaner" process for /run/tmp (or /tmp), and mandos-client were to run for long enough for that cleaner process to remove the temporary directory for GPGME, there was a possibility that another unprivileged process could trick the (also unprivileged) mandos-client process to remove other files or symlinks which the unprivileged mandos-client process was allowed to remove. This is not currently known to have been exploitable, since there are no known initramfs environments running such cleaner processes. * plugins.d/mandos-client.c (main): Use O_NOFOLLOW when opening tempdir for cleaning.	Teddy Hogeborn	10 years ago
237.7.244	Bug fix for mandos-client: Run the network hook, not the dir... Bug fix for mandos-client: Run the network hook, not the directory. * plugins.d/mandos-client.d (set_cloexec_flag): Removed. (run_network_hooks): Do not set O_CLOEXEC on "hookdir_fd". Instead, open hook to new "hook_fd" and simply close(hookdir_fd) before fexecve().	Teddy Hogeborn	10 years ago
237.7.243	Make mandos-client use more scandirat(). Make mandos-client use more scandirat(). * plugins.d/mandos-client.d (main): Use scandirat() when removing GPGME temp directory.	Teddy Hogeborn	10 years ago
237.7.242	Make mandos-client use unlinkat() instead of remove(). Make mandos-client use unlinkat() instead of remove(). * plugins.d/mandos-client.d (main): Replace remove() with unlinkat().	Teddy Hogeborn	10 years ago
237.7.241	Make mandos-client use fstatat(). Make mandos-client use fstatat(). * plugins.d/mandos-client.d (runnable_hook): Use fstatat().	Teddy Hogeborn	10 years ago
237.7.240	Make mandos-client use fexecve(). Make mandos-client use fexecve(). * plugins.d/mandos-client.d (run_network_hooks): Use fexecve().	Teddy Hogeborn	10 years ago
237.7.239	Make mandos-client use scandirat() if it exists. Make mandos-client use scandirat() if it exists. * plugins.d/mandos-client.d (hookdir_fd): File descriptor for hookdir. (set_cloexec_flag): Define this function if O_CLOEXEC is undefined. (run_network_hooks): Open hookdir_fd. Use scandirat() if it exists.	Teddy Hogeborn	10 years ago
237.7.238	Fix typo in code comment. Fix typo in code comment. * debian/mandos.postinst: Fix typo in comment.	Teddy Hogeborn	10 years ago
237.7.237	Minor bug fix in mandos-client: Remove memory leak for netwo... Minor bug fix in mandos-client: Remove memory leak for network hooks. * plugins.d/mandos-client.c (runnable_hook): Call free() on full file name of network hook.	Teddy Hogeborn	10 years ago
237.7.236	Minor bug fix in mandos-client: Allow periods in network hoo... Minor bug fix in mandos-client: Allow periods in network hook names. * plugins.d/mandos-client.c (runnable_hook): Add "." to strspn() call to match documentation.	Teddy Hogeborn	10 years ago
237.7.235	White space fix only. White space fix only. * plugins.d/mandos-client.c (main): Indent unindented blank lines.	Teddy Hogeborn	10 years ago
237.7.234	Merge from release branch. Merge from release branch.	Teddy Hogeborn	10 years ago

Older »