• D
    Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311) · 85ca4152
    Daniel P. Berrange 提交于
    With the existing pkcheck (pid, start time) tuple for identifying
    the process, there is a race condition, where a process can make
    a libvirt RPC call and in another thread exec a setuid application,
    causing it to change to effective UID 0. This in turn causes polkit
    to do its permission check based on the wrong UID.
    
    To address this, libvirt must get the UID the caller had at time
    of connect() (from SO_PEERCRED) and pass a (pid, start time, uid)
    triple to the pkcheck program.
    Signed-off-by: NColin Walters <walters@redhat.com>
    Signed-off-by: NDaniel P. Berrange <berrange@redhat.com>
    (cherry picked from commit 922b7fda)
    
    Conflicts:
    	src/access/viraccessdriverpolkit.c
    
    Resolution:
      Dropped file that does not exist in this branch.
    85ca4152
configure.ac 84.9 KB