projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 887b4e3) | patch
* login.c: fix a security-threating race condition: chown'ing the
authorBarry Jaspan <bjaspan@mit.edu>
Wed, 11 Sep 1996 21:28:43 +0000 (21:28 +0000)
committerBarry Jaspan <bjaspan@mit.edu>
Wed, 11 Sep 1996 21:28:43 +0000 (21:28 +0000)
commitc6fbdba2d20542c3f09d0f3497d6fbdab74ac032
treed52426b3085da68422756920c976e3cf2c6f7e3etree | snapshot
parent887b4e35081259b02fe1c374d4f9cf4db44cedb1commit | diff
* login.c: fix a security-threating race condition: chown'ing the
  ccache to the user can be bad if the user can delete the file
  first and make it a symlink to something else.  The solution is to
  re-create the ccache after login as setuid() to the user.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9084 dc483132-0cff-0310-8789-dd5450dbe970
src/appl/bsd/ChangeLog diff | blob | history
src/appl/bsd/login.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.