]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pw should sanitize the argument of -w.
authorasomers <asomers@FreeBSD.org>
Wed, 13 Jul 2016 17:09:20 +0000 (17:09 +0000)
committerasomers <asomers@FreeBSD.org>
Wed, 13 Jul 2016 17:09:20 +0000 (17:09 +0000)
commit3cee0b03108f7d853375aafa6062976483950dd3
treea9067900ffae4d6b6bed86db1b81c5ce0c2f2727
parent394ebb5296be4fc495b5a9ed2bfa2998e6c1d253
pw should sanitize the argument of -w.

Otherwise, it will silently disable the login for the selected account if
the argument is unrecognizable.

usr.sbin/pw/pw.h
usr.sbin/pw/pw_conf.c
usr.sbin/pw/pw_user.c
Use separate rules to validate boolean parameters and passwd
parameters.  Error out if a password parameter cannot be parsed.

usr.sbin/pw/tests/Makefile
usr.sbin/pw/tests/crypt.c
usr.sbin/pw/tests/pw_useradd.sh
usr.sbin/pw/tests/pw_usermod.sh
Add tests for the validation.  Also, enhance existing
password-related tests to actually validate that the correct hash is
written to master.passwd.

Reviewed by: bapt
MFC after: 4 weeks
Sponsored by: Spectra Logic Corp
Differential Revision: https://reviews.freebsd.org/D6840
usr.sbin/pw/pw.h
usr.sbin/pw/pw_conf.c
usr.sbin/pw/pw_user.c
usr.sbin/pw/tests/Makefile
usr.sbin/pw/tests/crypt.c [new file with mode: 0644]
usr.sbin/pw/tests/pw_useradd.sh
usr.sbin/pw/tests/pw_usermod.sh