1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
samba-mirror/source4/lib
Björn Baumbach 22af043d2f CVE-2013-4476: s4:libtls: check for safe permissions of tls private key file (key.pem)
If the tls key is not owned by root or has not mode 0600 samba will not
start up.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10234

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Björn Baumbach <bb@sernet.de>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Nov 11 13:07:16 CET 2013 on sn-devel-104
2013-11-11 13:07:16 +01:00
..
cmdline waf: Make sure we link against samba-util. 2013-02-14 16:56:29 +01:00
com s4-lib: Don't leak plugin handle on error. 2013-02-22 16:36:14 +01:00
events s4:lib/events: make use of samba_tevent_set_debug() 2013-02-28 12:12:36 +01:00
messaging lib/messaging: Check the server_id type correctly 2013-09-19 23:19:15 +02:00
policy s4-policy: Fix memory leaks in push_recursive(). 2013-02-22 16:36:14 +01:00
registry registry4: Fix CID 1034911 Dereference before null check 2013-08-19 11:15:20 +12:00
samba3 s4-lib/samba3: Remove unused smbpasswd_decode_acb_info() 2012-02-10 16:45:13 +11:00
socket s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in in unixdom_get_my_addr() 2013-07-24 14:37:43 +02:00
stream s4 dns: Fix TCP handling in the DNS server 2012-03-06 21:17:18 +01:00
tls CVE-2013-4476: s4:libtls: check for safe permissions of tls private key file (key.pem) 2013-11-11 13:07:16 +01:00
wmi s4:lib/wmi: avoid '//' comments 2011-10-08 07:24:14 +02:00