sssd-devel December 2021

sssd-devel@lists.fedorahosted.org

2 participants
83 discussions

[sssd PR#5892][synchronized] Tests: Add a test for BZ2004406
by jakub-vavra-cz 10 Dec '21

10 Dec '21

URL: https://github.com/SSSD/sssd/pull/5892 Author: jakub-vavra-cz Title: #5892: Tests: Add a test for BZ2004406 Action: synchronized To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5892/head:pr5892 git checkout pr5892

1 0

[sssd PR#5892][synchronized] Tests: Add a test for BZ2004406
by jakub-vavra-cz 09 Dec '21

09 Dec '21

1 0

[sssd PR#5835][opened] Tests: Add test for bz1636002.
by jakub-vavra-cz 09 Dec '21

09 Dec '21

URL: https://github.com/SSSD/sssd/pull/5835 Author: jakub-vavra-cz Title: #5835: Tests: Add test for bz1636002. Action: opened PR body: """ Verifies: SSSD-3347 Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1636002 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5835/head:pr5835 git checkout pr5835

3 30

[sssd PR#5891][opened] Tests: Podman supports subid ranges managed by FreeIPA
by aborah-sudo 09 Dec '21

09 Dec '21

URL: https://github.com/SSSD/sssd/pull/5891 Author: aborah-sudo Title: #5891: Tests: Podman supports subid ranges managed by FreeIPA Action: opened PR body: """ Podman supports subid ranges managed by FreeIPA """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5891/head:pr5891 git checkout pr5891

3 11

[sssd PR#5892][synchronized] Tests: Add a test for BZ2004406
by jakub-vavra-cz 08 Dec '21

08 Dec '21

1 0

[sssd PR#5872][opened] p11_child: Fixes for authentication
by dpward 07 Dec '21

07 Dec '21

URL: https://github.com/SSSD/sssd/pull/5872 Author: dpward Title: #5872: p11_child: Fixes for authentication Action: opened PR body: """ This addresses several issues when searching for a token for (pre-)authentication, in particular when `--wait_for_card` is used. It includes a partial fix for #5025 (RHBZ 1989996), so that tokens for authentication may be inserted into any slot on a single PKCS #11 module. This also includes fixes for possible memory leaks and unhandled error conditions in this part of the code. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5872/head:pr5872 git checkout pr5872

4 25

[sssd PR#5901][opened] utils: ignore systemd and sd-pam process in get_active_uid_linux()
by pbrezina 07 Dec '21

07 Dec '21

URL: https://github.com/SSSD/sssd/pull/5901 Author: pbrezina Title: #5901: utils: ignore systemd and sd-pam process in get_active_uid_linux() Action: opened PR body: """ We iterate processes in /proc to get the list of active users (users that has any process running). However, recent change in systemd makes systemd and sd-pam process ligner for few more seconds when the user has logged out which breaks the no-session functionality in pam responder. If user is logged in, another process then systemd and sd-pam must be running. Therefore we can just ignore these from the list. ``` admin 351997 0.4 0.0 22648 14636 ? Ss 13:25 0:00 /usr/lib/systemd/systemd --user admin 351999 0.0 0.0 201464 7756 ? S 13:25 0:00 (sd-pam) ``` Resolves: https://github.com/SSSD/sssd/issues/5900 :fixes: Quick log out and log in did not correctly refresh user's initgroups in `no_session` PAM schema due to lingering systemd processes. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5901/head:pr5901 git checkout pr5901

3 13

[sssd PR#5902][opened] SSS_CLIENT: fixed few covscan issues
by alexey-tikhonov 07 Dec '21

07 Dec '21

URL: https://github.com/SSSD/sssd/pull/5902 Author: alexey-tikhonov Title: #5902: SSS_CLIENT: fixed few covscan issues Action: opened PR body: """ Fixes following covscan issues: ``` Error: TAINTED_SCALAR (CWE-20): sssd-2.6.1/src/sss_client/subid/sss_subid.c:75: tainted_argument: Calling function "sss_cli_make_request_with_checks" taints argument "*repbuf". sssd-2.6.1/src/sss_client/subid/sss_subid.c:94: identity_transfer: Passing "repbuf + 4UL" as argument 2 to function "safealign_memcpy", which sets "num_results" to the dereference of that argument. sssd-2.6.1/src/sss_client/subid/sss_subid.c:94: tainted_data_transitive: Call to function "safealign_memcpy" with tainted argument "*repbuf" transitively taints "num_results". sssd-2.6.1/src/sss_client/subid/sss_subid.c:116: tainted_data: Passing tainted expression "num_results * 16UL" to "malloc", which uses it as an allocation size. sssd-2.6.1/src/sss_client/subid/sss_subid.c:116: remediation: Ensure that tainted values are properly sanitized, by checking that their values are within a permissible range. # 114| } # 115| # 116|-> *ranges = malloc(num_results * sizeof(struct subid_range)); # 117| if (!*ranges) { # 118| free(repbuf); Error: TAINTED_SCALAR (CWE-20): sssd-2.6.1/src/sss_client/subid/sss_subid.c:75: tainted_argument: Calling function "sss_cli_make_request_with_checks" taints argument "*repbuf". sssd-2.6.1/src/sss_client/subid/sss_subid.c:94: identity_transfer: Passing "repbuf + 4UL" as argument 2 to function "safealign_memcpy", which sets "num_results" to the dereference of that argument. sssd-2.6.1/src/sss_client/subid/sss_subid.c:94: tainted_data_transitive: Call to function "safealign_memcpy" with tainted argument "*repbuf" transitively taints "num_results". sssd-2.6.1/src/sss_client/subid/sss_subid.c:122: tainted_data: Using tainted variable "num_results" as a loop boundary. sssd-2.6.1/src/sss_client/subid/sss_subid.c:122: remediation: Ensure that tainted values are properly sanitized, by checking that their values are within a permissible range. # 120| } # 121| # 122|-> for (uint32_t c = 0; c < num_results; ++c) { # 123| SAFEALIGN_COPY_UINT32(&val, repbuf + index, &index); # 124| (*ranges)[c].start = val; Error: TAINTED_SCALAR (CWE-20): sssd-2.6.1/src/sss_client/subid/sss_subid.c:176: tainted_argument: Calling function "shadow_subid_list_owner_ranges" taints argument "amount". sssd-2.6.1/src/sss_client/subid/sss_subid.c:183: tainted_data: Using tainted variable "amount" as a loop boundary. sssd-2.6.1/src/sss_client/subid/sss_subid.c:183: remediation: Ensure that tainted values are properly sanitized, by checking that their values are within a permissible range. # 181| *result = false; # 182| # 183|-> for (int i = 0; i < amount; ++i) { # 184| if ((range[i].start <= start) && # 185| (range[i].start + range[i].count >= end)) { ``` Resolves: https://github.com/SSSD/sssd/issues/5878 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5902/head:pr5902 git checkout pr5902

3 12

[sssd PR#5883][comment] Various fixes related forest and site name discovery
by sumit-bose 06 Dec '21

06 Dec '21

URL: https://github.com/SSSD/sssd/pull/5883 Title: #5883: Various fixes related forest and site name discovery sumit-bose commented: """ Hi, sure, I can include one of the patches in the backport. I think the issue in #5645 is related to github. I checked the copies in the sssd-devel list and here the last versions send by Deepak correspond to what is committed. Also if you look at https://github.com/SSSD/sssd/pull/5645/commits there are the 2 patches show, together with the another version. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5883#issuecomment-986931803

1 0

[sssd PR#5892][synchronized] Tests: Add a test for BZ2004406
by jakub-vavra-cz 06 Dec '21

06 Dec '21

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel December 2021