Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP7:Update
mariadb.34173
mariadb-10.4.12-harden_setuid.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File mariadb-10.4.12-harden_setuid.patch of Package mariadb.34173
SUSE specific patch that hardens the auth_pam_tool setuid-root binary. Matthias Gerstner wants it as a prerequisite for allowing auth_pam_tool setuid-root binary in [bsc#1160285]. Index: b/plugin/auth_pam/auth_pam_base.c =================================================================== --- a/plugin/auth_pam/auth_pam_base.c +++ b/plugin/auth_pam/auth_pam_base.c @@ -150,6 +150,12 @@ static int pam_auth_base(struct param *p const char *service = info->auth_string && info->auth_string[0] ? info->auth_string : "mysql"; + if( strcmp(service, "mysql") != 0 ) + { + PAM_DEBUG((stderr, "PAM: rejecting non-standard PAM service %s\n", service)); + return CR_ERROR; + } + param->ptr = param->buf + 1; PAM_DEBUG((stderr, "PAM: pam_start(%s, %s)\n", service, info->user_name));
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
