54 commits

Author	SHA1	Message	Date
Andreas Kling	3b80358142	LibCore: Always fail Account authentication on missing shadow entry ... If a user is missing from /etc/shadow, we used to just allow anyone to authenticate as that user without a password. With this patch, authentication will instead always fail.	2021-01-21 11:34:39 +01:00
Andreas Kling	439f447ba8	LibCore+su+passwd: Don't keep /etc/passwd and /etc/shadow open ... Now that we've moved to atomic replacement of these files when altering them, we don't need to keep them open for the lifetime of Core::Account so just simplify this and close them when they are not needed.	2021-01-21 11:17:06 +01:00
Andreas Kling	77e0598c6d	passwd+LibCore: Make passwd replace /etc files atomically ... Before this patch, we had a nasty race condition when changing a user's password: there was a time window between truncating /etc/shadow and writing out its new contents, where you could simply "su" to root without using a password. Instead of writing directly to /etc/passwd and /etc/shadow, we now create temporary files in /etc and fill them with the new contents. Those files are then atomically renamed to /etc/passwd and /etc/shadow. Sadly, fixing this race requires giving the passwd program a lot more privileges. This is something we can and should improve upon. :^)	2021-01-21 11:08:20 +01:00
Andreas Kling	13d7c09125	Libraries: Move to Userland/Libraries/	2021-01-12 12:17:46 +01:00

Renamed from Libraries/LibCore/Account.cpp (Browse further)