50dc83
From 3d0e09400dc21dbb5f76fd9ca4bfce3edad0d626 Mon Sep 17 00:00:00 2001
e7a346
From: Milind Changire <mchangir@redhat.com>
e7a346
Date: Fri, 14 Oct 2016 12:53:27 +0530
50dc83
Subject: [PATCH 15/52] build: randomize temp file names in pretrans scriptlets
e7a346
e7a346
Security issue CVE-2015-1795 mentions about possibility of file name
e7a346
spoof attack for the %pretrans server scriptlet.
e7a346
Since %pretrans scriptlets are executed only for server builds, we can
e7a346
use os.tmpname() to randomize temporary file names for all %pretrans
e7a346
scriptlets using this mechanism.
e7a346
e7a346
Label: DOWNSTREAM ONLY
e7a346
e7a346
Change-Id: Ic82433897432794b6d311d836355aa4bad886369
e7a346
Signed-off-by: Milind Changire <mchangir@redhat.com>
e7a346
Reviewed-on: https://code.engineering.redhat.com/gerrit/86187
e7a346
Reviewed-by: Siddharth Sharma <siddharth@redhat.com>
e7a346
Reviewed-by: Niels de Vos <ndevos@redhat.com>
e7a346
Reviewed-by: Atin Mukherjee <amukherj@redhat.com>
e7a346
---
50dc83
 glusterfs.spec.in | 84 +++++++++++++++++++++++++++++++------------------------
50dc83
 1 file changed, 48 insertions(+), 36 deletions(-)
e7a346
e7a346
diff --git a/glusterfs.spec.in b/glusterfs.spec.in
50dc83
index 8c57f57..3a98822 100644
e7a346
--- a/glusterfs.spec.in
e7a346
+++ b/glusterfs.spec.in
50dc83
@@ -1549,9 +1549,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1590,9 +1591,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-api_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1631,9 +1633,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-api-devel_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1672,9 +1675,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-cli_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1712,9 +1716,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-client-xlators_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1752,9 +1757,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-devel_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1793,9 +1799,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-fuse_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1835,9 +1842,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-geo-replication_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1877,9 +1885,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-libs_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1919,9 +1928,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-rdma_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -1962,9 +1972,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-resource-agents_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
50dc83
@@ -2004,9 +2015,10 @@ if [ $? -eq 0 ]; then
e7a346
 fi
e7a346
 ]]
e7a346
 
e7a346
--- rpm in RHEL5 does not have os.tmpname()
e7a346
--- io.tmpfile() can not be resolved to a filename to pass to bash :-/
e7a346
-tmpname = "/tmp/glusterfs-server_pretrans_" .. os.date("%s")
e7a346
+-- Since we run pretrans scripts only for RPMs built for a server build,
e7a346
+-- we can now use os.tmpname() since it is available on RHEL6 and later
e7a346
+-- platforms which are server platforms.
e7a346
+tmpname = os.tmpname()
e7a346
 tmpfile = io.open(tmpname, "w")
e7a346
 tmpfile:write(script)
e7a346
 tmpfile:close()
e7a346
-- 
e7a346
1.8.3.1
e7a346