Ticket #1782 (closed defect: fixed)
TOCTOU race conditions by copying and removing directory trees
|Reported by:||jhrozek||Owned by:||jhrozek|
|Tests Updated:||no||Coverity Bug:|
|Patch Submitted:||yes||Red Hat Bugzilla:||884254|
|Design review:||no||Fedora test page:|
|Chosen:||Candidate to push out:|
A TOCTOU (time-of-check time-of-use) race condition was found in the way SSSD, System Security Services Daemon, performed copying and removal of (user) directory trees.A local attacker, with permissions to write into directory of the victim, being actively / currently copied / removed via the sssd daemon facility, could use this flaw to conduct symbolic link attacks, leading to their ability to alter / remove directories outside of originally intended, to be modified, directory tree.
This issue was found by Florian Weimer of Red Hat Product Security Team.
- Owner changed from somebody to jhrozek
- Red Hat Bugzilla set to 884254
- Status changed from new to assigned