diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-01-18 15:44:06 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-01-18 16:15:48 +0100 |
| commit | 2ec6372f5af64b132f01b5d0d160e3a0a02ae4bf (patch) | |
| tree | e5ecc4b5625602d77641ec71129783e90fa490c5 /src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c | |
| parent | 1c27cf3bc826072d525e15e3175229660cd4acff (diff) | |
| download | strongswan-2ec6372f5af64b132f01b5d0d160e3a0a02ae4bf.tar.bz2 strongswan-2ec6372f5af64b132f01b5d0d160e3a0a02ae4bf.tar.xz | |
ipsec: Only allow specific commands to be executed via ipsec script
The previous fallback allowed running any executable as root if executing
ipsec via sudo was allowed, by using e.g. `sudo ipsec ../../../bin/sh`.
Diffstat (limited to 'src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c')
0 files changed, 0 insertions, 0 deletions