CVE-2013-4476: s4:libtls: check for safe permissions of tls private key file (key...
authorBjörn Baumbach <bb@sernet.de>
Tue, 29 Oct 2013 16:53:59 +0000 (17:53 +0100)
committerKarolin Seeger <kseeger@samba.org>
Mon, 11 Nov 2013 12:07:16 +0000 (13:07 +0100)
commit22af043d2f20760f27150d7d469c7c7b944c6b55
tree4c3ca4fa5379ef1cb5fb541d4df6b4d38799dc41
parente0248cde8dcd82f348218665f5edd6b30cd3ef1f
CVE-2013-4476: s4:libtls: check for safe permissions of tls private key file (key.pem)

If the tls key is not owned by root or has not mode 0600 samba will not
start up.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10234

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Björn Baumbach <bb@sernet.de>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Nov 11 13:07:16 CET 2013 on sn-devel-104
source4/lib/tls/tls.c
source4/lib/tls/tls_tstream.c