diff options
| author | Max Rees <maxcrees@me.com> | 2019-05-30 05:21:39 -0400 |
|---|---|---|
| committer | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2019-06-01 05:25:29 +0000 |
| commit | 5ab32da26eab7805e9c718e390e6227fd910a9b8 (patch) | |
| tree | 3197e4478bd9ace2fd6119bd69a5950d0b27dfe5 /user/qps | |
| parent | d448f4e0c6a17170cad364b25d7208c29ac7604e (diff) | |
| download | packages-5ab32da26eab7805e9c718e390e6227fd910a9b8.tar.gz packages-5ab32da26eab7805e9c718e390e6227fd910a9b8.tar.bz2 packages-5ab32da26eab7805e9c718e390e6227fd910a9b8.tar.xz packages-5ab32da26eab7805e9c718e390e6227fd910a9b8.zip | |
system/adelie-base: reset PATH in addgroup, adduser
Since addgroup and adduser can potentially be called by any user in the
"abuild" group with an arbitrary PATH via the setuid binary abuild-sudo
(by way of the abuild-adduser and abuild-addgroup symlinks, used in the
"mkusers" step of abuild), PATH should be reset before execing groupadd
and useradd.
Diffstat (limited to 'user/qps')
0 files changed, 0 insertions, 0 deletions