Pádraig Brady 8cb06d4b44 runcon: disable use of the TIOCSTI ioctl ...

Similar to the issue with SELinux sandbox (CVE-2016-7545),
children of runcon can inject arbitrary input to the terminal
that would be run at the originating terminal privileges.

The new libseccomp dependency is widely available and used
on modern SELinux systems, but is not available by default
on older systems like RHEL6 etc.

* m4/jm-macros.m4: Check for libseccomp and
warn if unavailable on selinux supporting systems.
* src/local.mk: Link runcon with -lseccomp.
* src/runcon.c (disable_tty_inject): A new function to
disable use of the TIOCSTI using libseccomp, or with setsid()
where libseccomp is unavailable.
* tests/misc/runcon-no-inject.sh: A new test that uses
python to make the TIOCSTI call, and ensure that doesn't succeed.
* tests/local.mk: Reference the new test
* NEWS: Mention the fix.
Addresses http://bugs.gnu.org/24541

2017-08-29 00:38:19 -07:00

..

chgrp

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

chmod

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

chown

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

cp

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

dd

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

df

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

du

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

factor

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

fmt

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

id

tests: avoid false failures on AIX

2017-08-13 21:33:01 -07:00

install

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

ln

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

ls

ls: support --hyperlink to output file:// URIs

2017-08-29 00:38:19 -07:00

misc

runcon: disable use of the TIOCSTI ioctl

2017-08-29 00:38:19 -07:00

mkdir

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

mv

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

pr

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

readlink

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

rm

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

rmdir

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

split

split: add new --hex-suffixes option

2017-03-27 20:32:58 -07:00

tail-2

tail: reinstate inotify use with FIFOs

2017-08-24 19:20:47 -07:00

touch

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00

Coreutils.pm

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

CuSkip.pm

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

CuTmpdir.pm

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

d_type-check

tests: fix dirent d_type support verification

2015-11-06 16:40:42 +00:00

envvar-check

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

fiemap-capable

test: improve the cp fiemap tests

2011-02-08 22:46:25 +00:00

filefrag-extent-compare

tests: fix a false positive fiemap test on some file systems

2011-04-13 11:18:48 +01:00

GNUmakefile

tests: reenable "make -C tests ..." commands

2012-09-14 10:20:03 +02:00

init.sh

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

lang-default

…

local.mk

runcon: disable use of the TIOCSTI ioctl

2017-08-29 00:38:19 -07:00

no-perl

maint: use standard spacing in shebang line in tests

2015-11-10 13:03:33 +00:00

other-fs-tmpdir

maint: update all copyright year number ranges

2017-01-01 22:38:02 +00:00

sample-test

tests: don't fail tests when failing to write files

2017-08-29 00:37:59 -07:00