util-linux/login-utils
Sami Kerola 46df3aaae8
vipw: use explicit_bzero() to clear buffer after copy
This should make leaking end of /etc/shadow file more unlikely.

Notice that there is now way to tell to editors they should ensure none it
does not leak any buffers, drop cores, and so on, when editing sensitive
data.  In short this change is addressing the issue only partially.

Signed-off-by: Sami Kerola <kerolasa@iki.fi>
2017-08-05 09:58:25 +01:00
..
Makemodule.am build-sys: make chown usage more robust 2017-06-21 11:12:04 +02:00
auth.c include: move pamfail.h to auth.c 2017-08-05 09:58:18 +01:00
auth.h chsh-chfn: Move pam auth to its own function, factoring out common code 2013-02-13 09:28:33 +01:00
ch-common.c chfn, chsh: share illegal_passwd_chars() function 2015-01-05 22:52:50 +00:00
ch-common.h chfn, chsh: share illegal_passwd_chars() function 2015-01-05 22:52:50 +00:00
chfn.1 man: chfn(1): add chsh and login.defs to SEE ALSO 2017-01-19 22:52:57 +01:00
chfn.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
chsh.1 chsh: use -h as shorthand for --help instead of -u 2017-01-19 23:11:42 +01:00
chsh.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
islocal.c login-utils: use libc error printing facility 2014-12-09 09:19:20 +01:00
islocal.h login: rewrite is_local() to remove limits on line length 2008-04-14 13:12:14 +02:00
last.1 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
last.c Merge branch 'help' of https://github.com/rudimeier/util-linux 2017-07-10 10:15:22 +02:00
lastb.1 last: merge sysvinit last/lastb 2013-08-12 12:07:52 +02:00
libuser.c chsh-chfn: fix bugs, improve compilation 2013-02-13 13:44:34 +01:00
libuser.h chsh: Add libuser support 2013-02-13 09:37:15 +01:00
login.1 login: add --help and --version 2017-06-22 21:34:54 +02:00
login.c login: use IPv4 on IPv4-mapping-to-IPv6 2017-07-04 13:03:08 +02:00
logindefs.c login: prevent OOB read on illegal /etc/hushlogins 2017-03-13 12:46:49 +01:00
logindefs.h lslogins: add functionality 2014-05-15 13:55:59 +02:00
lslogins.1 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
lslogins.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
newgrp.1 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
newgrp.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
nologin.8 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
nologin.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
runuser.1 runuser: add "--" to SYNOPSIS 2017-01-19 12:04:05 +01:00
runuser.c su: fix stupid typo 2012-11-01 13:03:28 +01:00
selinux_utils.c chfn: chsh: use selinux_check_passwd_access() 2016-06-14 13:38:13 +02:00
selinux_utils.h chfn: chsh: use selinux_check_passwd_access() 2016-06-14 13:38:13 +02:00
setpwnam.c setpwnam: fix memory leak 2016-04-19 21:27:54 +01:00
setpwnam.h chsh, chfn, vipw: fix filenames collision 2015-08-24 10:05:55 +02:00
su-common.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
su-common.h su: move generic su code to su-common.c 2012-09-04 17:00:30 +02:00
su.1 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
su.c su: fix stupid typo 2012-11-01 13:03:28 +01:00
sulogin-consoles.c sulogin: reduce vulnerability surface 2017-05-02 23:22:04 +01:00
sulogin-consoles.h include/ttyutils: add default chardata 2013-01-08 15:42:12 +01:00
sulogin.8 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
sulogin.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
utmpdump.1 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
utmpdump.c misc: consolidate macro style USAGE_HELP_OPTIONS 2017-06-29 16:54:33 +02:00
vigr.8 Imported from util-linux-2.7.1 tarball. 2006-12-07 00:25:34 +01:00
vipw.8 docs: replace FTP by HTTPS in kernel.org URLs 2016-12-19 11:22:26 +01:00
vipw.c vipw: use explicit_bzero() to clear buffer after copy 2017-08-05 09:58:25 +01:00