Age | Commit message (Collapse) | Author |
|
Import the patch from RedHat to fix CVE-2014-7169, reported following
the fix for CVE-2014-6271 that didn't completely fix the issue.
Original Author : Ondrej Oprala <ooprala@redhat.com>
http://pkgs.fedoraproject.org/cgit/bash.git/
commit/?h=f20&id=9766d4f8827c16deaf3681bb52859bb3828bcc4b
Related to Bug #324
Bug #326 http://bugzilla.vyos.net/show_bug.cgi?id=326
|
|
|
|
mode with ctrl+d
|
|
|
|
This is merge of current Debian stable (Lenny) version of Bash
with Vyatta changes.
|
|
The command auditing patch had a number of issues:
* was looking at shell_input_line rather than what user entered
* reopened audit file descriptor on each command
* left audit_fd dangling in child
* looked up tty on each command
It still does getcwd() on each command but that probably can't be helped.
|
|
This is based on earlier (unaccepted) patch to add auditing
support which wasd done by Steve Grubb at Redhat.
This patch depends on audit 1.4 to provide a logging function.
The resulting audit message looks like this:
time->Tue Jan 30 18:23:45 2007
type=USER_CMD msg=audit(1170199425.793:143): user pid=22862 uid=0 auid=0
subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023
msg='cwd=2F726F6F742F7465737420646972 cmd=6C73202D6C (terminal=tty1
res=success)'
Which translates to:
type=USER_CMD msg=audit(01/30/2007 18:23:45.793:143) : user pid=22862 uid=root
auid=root subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023
msg='cwd=/root/test dir cmd=ls -l (terminal=tty1 res=success)'
This patch causes bash to log all command line arguments when the shell
is started as aubash or "bash --audit". The preferred methos is to make a
symlink frp, bash to aubash and then add aubash to /etc/shells. Then you
can change root's shell to aubash.
|
|
|
|
on automatic escaping, second turns off. Will support unquoted, single quoted and
double quoted forms of text strings.
|
|
this fixes a bug where the negation character in nat/firewall/wlb
commands required user escaping.
|
|
|
|
testing, removed generated files from project.
|
|
This reverts commit 402da0491b06f6c837f7fe8d28aa8605423928bf.
|
|
|
|
in vbash shell without requiring quotes on string. only applies to set/delete commands in vbash shell. Behavior is now much closer to juniper shell behavior with special characters.
|
|
|
|
|