5 commits

Author	SHA1	Message	Date
Andreas Kling	2ab9083420	passwd: Drop "rpath" pledge after opening files ... We needed this for mkstemp() since it used lstat() internally. Now that it only uses open(), we don't need to pledge "rpath".	2021-01-22 19:39:44 +01:00
Doctor5555	6803d5dfbe	passwd: Remove duplicate 'wpath' pledge	2021-01-22 11:09:44 +01:00
Andreas Kling	439f447ba8	LibCore+su+passwd: Don't keep /etc/passwd and /etc/shadow open ... Now that we've moved to atomic replacement of these files when altering them, we don't need to keep them open for the lifetime of Core::Account so just simplify this and close them when they are not needed.	2021-01-21 11:17:06 +01:00
Andreas Kling	77e0598c6d	passwd+LibCore: Make passwd replace /etc files atomically ... Before this patch, we had a nasty race condition when changing a user's password: there was a time window between truncating /etc/shadow and writing out its new contents, where you could simply "su" to root without using a password. Instead of writing directly to /etc/passwd and /etc/shadow, we now create temporary files in /etc and fill them with the new contents. Those files are then atomically renamed to /etc/passwd and /etc/shadow. Sadly, fixing this race requires giving the passwd program a lot more privileges. This is something we can and should improve upon. :^)	2021-01-21 11:08:20 +01:00
Andreas Kling	ececac65c2	Userland: Move command-line utilities to Userland/Utilities/	2021-01-12 12:04:09 +01:00

Renamed from Userland/passwd.cpp (Browse further)