NXv3 (redistributed) https://openid.arctica-project.org/nx-libs/atom?h=pr%2Frender-cleanup 2015-04-04T08:59:50+00:00 2015-04-04T08:59:50+00:00 Mike Gabriel mike.gabriel@das-netzwerkteam.de 2015-03-04T12:29:02+00:00 urn:sha1:f5f280417cb0af489406c8c3234e4ad69b008c74 2015-02-14T15:14:31+00:00 Mike DePaulo mikedep333@gmail.com 2015-02-09T00:16:38+00:00 urn:sha1:df4a3b7270539843ae76275485ca76efcdf361d9 use O_NOFOLLOW to open the existing lock file, so symbolic links aren't followed, thus avoid revealing if it point to an existing file. 2015-02-13T12:32:17+00:00 Orion Poplawski orion@cora.nwra.com 2015-02-13T12:32:17+00:00 urn:sha1:415b20b6fbf562d4132fca90a00b6c32d94040ed The Fedora review of NX (redistributed) caught the following rpmlint issue: This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this mean it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. Ref POS36-C: https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges This patch adds initgroups() calls to the code to initialize the supplemental group list. 2011-10-10T15:47:52+00:00 Reinhard Tartler siretart@tauware.de 2011-10-10T15:47:52+00:00 urn:sha1:964f539648bb74098972b09d576b0bb4dd21a3c5 Summary: Imported nx-X11-3.5.0-1.tar.gz Keywords: Imported nx-X11-3.5.0-1.tar.gz into Git repository 2011-10-10T15:47:47+00:00 Reinhard Tartler siretart@tauware.de 2011-10-10T15:47:47+00:00 urn:sha1:4fceb197efd5938926ac88b5d730ecec7953623f Summary: Imported nx-X11-3.4.0-3.tar.gz Keywords: Imported nx-X11-3.4.0-3.tar.gz into Git repository 2011-10-10T15:47:45+00:00 Reinhard Tartler siretart@tauware.de 2011-10-10T15:47:45+00:00 urn:sha1:3daf6d44677355d71df527a0d6fc4c4494628731 Summary: Imported nx-X11-3.4.0-1.tar.gz Keywords: Imported nx-X11-3.4.0-1.tar.gz into Git repository 2011-10-10T15:47:37+00:00 Reinhard Tartler siretart@tauware.de 2011-10-10T15:47:37+00:00 urn:sha1:55a9311fb1df3b58f73efa575318e7341243392b Summary: Imported nx-X11-3.3.0-5.tar.gz Keywords: Imported nx-X11-3.3.0-5.tar.gz into Git repository 2011-10-10T15:43:39+00:00 Reinhard Tartler siretart@tauware.de 2011-10-10T15:43:39+00:00 urn:sha1:f4092abdf94af6a99aff944d6264bc1284e8bdd4 Summary: Imported nx-X11-3.1.0-1.tar.gz Keywords: Imported nx-X11-3.1.0-1.tar.gz into Git repository