1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/testsuite
Gary Lockyer d11473b15d source3: remove sock_exec
Remove the sock_exec code which is no longer needed and additionally has been
used by exploit code.

This was originally test support code, the tests relying on the sock_exec
code have been removed.

Past exploits have used sock_exec as a proxy for system() matching a talloc
destructor prototype.

See for example:
Exploit for Samba vulnerabilty (CVE-2015-0240) at
    https://gist.github.com/worawit/051e881fc94fe4a49295
    and the Red Hat post at
    https://access.redhat.com/blogs/766093/posts/1976553

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Nov 20 07:20:13 CET 2017 on sn-devel-144
2017-11-20 07:20:13 +01:00
..
build_farm source3: remove sock_exec 2017-11-20 07:20:13 +01:00
headers waf: disable-python - don't include python.h in test_headers.c 2017-03-10 11:24:13 +01:00
nsswitch testsuit: Fix fprintf format. 2013-11-15 11:07:40 -08:00
smbd Replace all uses of setXX[ug]id() and setgroups with samba_setXX[ug]id() calls. 2012-06-28 17:15:16 -07:00
unittests unittests: Fix missing include of signal.h 2017-10-18 14:24:39 +02:00
README testsuite: Remove unused and unlikely to be revived DejaGNU tests 2011-12-12 12:57:08 +01:00

README for testsuite directory
------------------------------

The Samba testsuite is divided up into the following subdirectories.

    - lib	      Various library files used by tool directories
    
    - nsswitch        Tests for nsswitch extensions

    - build_farm      Tests designed to run automatically on the build farm

All the scripts except those in build_farm require an unreleased
version of DejaGNU, and although they contain some useful tests they
are not so useful at the moment.  All scripts are migrating to a
single test framework, Satyr.  <cvs://cvs.samba.org/data/cvs/satyr>