| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
| |
For coherency with the existing RPCs
|
| |
|
|
| |
And add proc_complete_reauthentication ()
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
exec_reauth () is supposed to reauthenticate the given ports and file
descriptors with a new authentication. If the secure flag is set, this
reauthentication is happening for a future exec with the EXEC_SECURE
flag.
Now that the exec server uses proc_reauthenticate_reassign (), the process
reauthentication is done atomically with task reassignment by the exec
server. So stop doing it inside exec_reauth ().
This fixes a vulnerability where a process was able to use its
reauthenticated proc port before it got exec'ed over.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
In that case we have two receive right references, which we should consume
one per one, instead of destroying them all at once (and thus fail on second
destroy)
http://lists.gnu.org/archive/html/bug-hurd/2011-03/msg00045.html
* libfshelp/fetch-root.c (fshelp_fetch_root): Unreference rendez-vous port
receive right instead of destroying the port.
* libshouldbeinlibc/exec-reauth.c (exec_reauth): Likewise.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* exec-reauth.c (exec_reauth): Change type of temp var i to
unsigned int to address gcc warning.
* idvec-impgids.c (idvec_merge_implied_gids) Change type of
temp var i to unsigned int to address gcc warning.
* idvec-impgids.c (idvec_merge_implied_gids): Change type of
temp var i to unsigned int to address gcc warning.
* idvec-rep.c (idvec_rep): Change type of temp var i to unsigned
int to address gcc warning.
* idvec-verify (idvec_verify): Change type of temp var i to
unsigned int to address gcc warning.
* idvec.c (idvec_merge_ids, idvec_remove): Change type of temp
var i to unsigned int to address gcc warning.
* portxlate.c (port_name_xlator_create, port_name_xlator_free):
Change type of temp var i to unsigned int to address gcc warning.
* timefmt.c (fmt_seconds): Cast width to int in test to modify
frac_places to address gcc warning.
* (ugids_verify_make_auth): Change type of temp var i to unsigned
int to address gcc warning.
|
| |
|
|
|
| |
* exec-reauth.c (exec_reauth): Always destroy REF, even when we
get errors.
|
| | |
|
| | |
|
| | |
|
| |
|
