#14 mkhomedir: add support for pre-CVE-2020-10737 behavior
Merged by abbra. Opened by abbra.
abbra/oddjob restore-nfs-create-mkdir  into  master

Download 14.patch

Pre-CVE-2020-10737 behavior was used to allow creating home directories
on NFS mounts when non-Kerberos authentication method is in use. This is
exactly the case where a race condition addressed by the CVE-2020-10737
fix could have happened. However, there are legit use cases where this
setup is needed.

Add '-f' option to mkhomedir helper to activate previous behavior. In
order to enable it, a change to oddjobd-mkhomedir.conf configuration
file is needed by explicitly adding '-f' option to the executable file
definition.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2050079

Signed-off-by: Alexander Bokovoy abokovoy@redhat.com

Pull-Request has been merged by abbra

Metadata