#6 CVE-2020-10737: defer setting permissions on newly-created home directories
Merged by nalin. Opened by nalin.
nalin/oddjob cve-2020-10737  into  master

Download 6.patch

mkhomedir: add a patch from Matthias Gerstner of the SUSE security team to defer setting permissions on newly-created home directories until after we've finished populating them, to prevent possible interference and attacks from the user who will eventually be given access to the new home directory, while it's still being populated (CVE-2020-10737).

rebased onto 10b8aaa1564b723a005b53acc069df71313f4cac

Pull-Request has been merged by nalin

Metadata