Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Symlink directory traversal security fix #556

Merged
merged 12 commits into from
Sep 10, 2021
Merged

Symlink directory traversal security fix #556

merged 12 commits into from
Sep 10, 2021

Commits on Sep 1, 2021

  1. Initial low-priv execution implementation

    @devttys0
    devttys0 committed Sep 1, 2021
    Configuration menu
    Copy the full SHA
    0d6bf60 View commit details
    Browse the repository at this point in the history

  2. Added option to turn off privilege dropping

    @devttys0
    devttys0 committed Sep 1, 2021
    Configuration menu
    Copy the full SHA
    bd2c356 View commit details
    Browse the repository at this point in the history

Commits on Sep 3, 2021

  1. Added option for specifying a user to run external extraction utiltie… 

    …s as
    @devttys0
    devttys0 committed Sep 3, 2021
    Configuration menu
    Copy the full SHA
    8f1dcca View commit details
    Browse the repository at this point in the history

  2. Initial symlink 'repair' solution

    @devttys0
    devttys0 committed Sep 3, 2021
    Configuration menu
    Copy the full SHA
    54d40f6 View commit details
    Browse the repository at this point in the history

Commits on Sep 5, 2021

  1. Added code comments and better error output for end user

    @devttys0
    devttys0 committed Sep 5, 2021
    Configuration menu
    Copy the full SHA
    8b06290 View commit details
    Browse the repository at this point in the history

  2. Bug fixes, code testing

    @devttys0
    devttys0 committed Sep 5, 2021
    Configuration menu
    Copy the full SHA
    cc5cf9b View commit details
    Browse the repository at this point in the history

  3. Code cleanup

    @devttys0
    devttys0 committed Sep 5, 2021
    Configuration menu
    Copy the full SHA
    0988b2e View commit details
    Browse the repository at this point in the history

  4. Added directory traversal test; fixed zip test.

    @devttys0
    devttys0 committed Sep 5, 2021
    Configuration menu
    Copy the full SHA
    dd4f2ef View commit details
    Browse the repository at this point in the history

  5. Updated README.md to include extraction security notice.

    @devttys0
    devttys0 committed Sep 5, 2021
    Configuration menu
    Copy the full SHA
    271333b View commit details
    Browse the repository at this point in the history

Commits on Sep 6, 2021

  1. Fixed dirtraversal test; updated extractor to not fork unless necessa… 

    …ry (nose tests don't like sys.exit)
    @devttys0
    devttys0 committed Sep 6, 2021
    Configuration menu
    Copy the full SHA
    97a5954 View commit details
    Browse the repository at this point in the history

  2. Fixed code comment

    @devttys0
    devttys0 committed Sep 6, 2021
    Configuration menu
    Copy the full SHA
    adb02d2 View commit details
    Browse the repository at this point in the history

Commits on Sep 7, 2021

  1. Added option to disable symlink sanitization if desired

    @devttys0
    devttys0 committed Sep 7, 2021
    Configuration menu
    Copy the full SHA
    8f3dd37 View commit details
    Browse the repository at this point in the history