fragattacks/hs20/client
Jouni Malinen 02f52ab6f5 Use lchown() instead of chown() for self-created files
There is no need to allow symlink dereferencing in these cases where a
file (including directories and sockets) are created by the same
process, so use the safer lchown() variant to avoid leaving potential
windows for something external to replace the file before the chown()
call. The particular locations used here should not have write
permissions enabled for processes with less privileges, so this may not
be needed, but anyway, it is better to make these more restrictive
should there be cases where directory permissions are not as expected
for a good deployment.

Signed-off-by: Jouni Malinen <j@w1.fi>
2019-01-06 20:28:04 +02:00
..
Android.mk Android: Remove superfluous OpenSSL include paths 2016-03-03 16:27:10 +02:00
devdetail.xml HS 2.0R2: Add OSU client implementation 2014-03-12 01:09:22 +02:00
devinfo.xml HS 2.0R2: Add OSU client implementation 2014-03-12 01:09:22 +02:00
est.c HS 2.0: Fix EST compilation with OpenSSL 1.1.0 and newer 2019-01-01 19:56:19 +02:00
Makefile HTTP (curl): OCSP with BoringSSL 2015-12-04 20:08:31 +02:00
oma_dm_client.c HS 2.0: Do not require devinfo.xml for all hs20-osu-client operations 2018-10-30 15:29:12 +02:00
osu_client.c Use lchown() instead of chown() for self-created files 2019-01-06 20:28:04 +02:00
osu_client.h HS 2.0: Allow OSU SSID selection to be enforced for testing purposes 2018-09-13 00:17:51 +03:00
spp_client.c HS 2.0: spp-client: Warn user if xml file cannot be found 2015-05-27 11:55:43 +03:00