Björn Esser bc8257cf73 libmisc/salt.c: Obtain random bytes from /dev/urandom. ...

Using the random() function to obtain pseudo-random bytes
for generating salt strings is considered to be dangerous.
See CWE-327.

We really should use a more reliable source for obtaining
pseudo-random bytes like /dev/urandom.

Fixes #376.

Signed-off-by: Björn Esser <besser82@fedoraproject.org>

2021-06-23 16:30:21 +02:00

..

.indent.pro

…

addgrps.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

age.c

…

audit_help.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

basename.c

…

btrfs.c

silence compiler warnings

2020-01-12 07:31:26 -06:00

chkname.c

chkname.c, pwck.c, useradd.c, usermod.c, newusers.c: Allow names that do not conform to standards

2019-10-04 18:40:41 -05:00

chkname.h

…

chowndir.c

…

chowntty.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

cleanup_group.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

cleanup_user.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

cleanup.c

…

console.c

Fix some issues found in Coverity scan.

2018-10-10 12:22:04 +02:00

copydir.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

entry.c

…

env.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

failure.c

Fix covscan BUFFER_SIZE

2021-06-16 09:50:53 +02:00

failure.h

spelling: cumulative

2017-10-22 18:33:13 +00:00

find_new_gid.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

find_new_sub_gids.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

find_new_sub_uids.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

find_new_uid.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

getdate.h

…

getdate.y

spelling: gratuitously

2017-10-22 19:17:02 +00:00

getgr_nam_gid.c

…

getrange.c

…

gettime.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

hushed.c

…

idmapping.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

idmapping.h

subids: support nsswitch

2021-04-16 21:02:37 -05:00

isexpired.c

…

limits.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

list.c

…

log.c

Fix covscan BUFFER_SIZE

2021-06-16 09:50:53 +02:00

loginprompt.c

…

mail.c

…

Makefile.am

try again to fix libmisc sharing problem

2021-04-11 17:42:04 -05:00

motd.c

…

myname.c

…

obscure.c

Add yescrypt support

2021-02-01 22:11:10 +01:00

pam_pass_non_interactive.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

pam_pass.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

prefix_flag.c

usermod, newusers, prefix: enforce absolute paths for homedir

2021-06-01 22:12:24 -05:00

pwd2spwd.c

Make the sp_lstchg shadow field reproducible (re. #71)

2019-03-31 16:00:01 +01:00

pwd_init.c

…

pwdcheck.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

remove_tree.c

…

rlogin.c

…

root_flag.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

salt.c

libmisc/salt.c: Obtain random bytes from /dev/urandom.

2021-06-23 16:30:21 +02:00

setugid.c

…

setupenv.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

shell.c

…

strtoday.c

spelling: cumulative

2017-10-22 18:33:13 +00:00

sub.c

…

sulog.c

…

ttytype.c

…

tz.c

…

ulimit.c

…

user_busy.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

utmp.c

Fix covscan BUFFER_SIZE

2021-06-16 09:50:53 +02:00

valid.c

…

xgetgrgid.c

…

xgetgrnam.c

…

xgetpwnam.c

…

xgetpwuid.c

…

xgetspnam.c

…

xgetXXbyYY.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

xmalloc.c

libsubid: don't print error messages on stderr by default

2021-05-15 12:38:55 -05:00

yesno.c

…