7a8867abfa
This reworks the user validation infrastructure. There are now two modes. In regular mode we are strict and test against a strict set of valid chars. And in "relaxed" mode we just filter out some really obvious, dangerous stuff. i.e. strict is whitelisting what is OK, but "relaxed" is blacklisting what is really not OK. The idea is that we use strict mode whenver we allocate a new user (i.e. in sysusers.d or homed), while "relaxed" mode is when we process users registered elsewhere, (i.e. userdb, logind, …) The requirements on user name validity vary wildly. SSSD thinks its fine to embedd "@" for example, while the suggested NAME_REGEX field on Debian does not even allow uppercase chars… This effectively liberaralizes a lot what we expect from usernames. The code that warns about questionnable user names is now optional and only used at places such as unit file parsing, so that it doesn't show up on every userdb query, but only when processing configuration files that know better. Fixes: #15149 #15090 |
||
---|---|---|
.. | ||
home-util.c | ||
home-util.h | ||
homectl.c | ||
homed-bus.c | ||
homed-bus.h | ||
homed-home-bus.c | ||
homed-home-bus.h | ||
homed-home.c | ||
homed-home.h | ||
homed-manager-bus.c | ||
homed-manager-bus.h | ||
homed-manager.c | ||
homed-manager.h | ||
homed-operation.c | ||
homed-operation.h | ||
homed-varlink.c | ||
homed-varlink.h | ||
homed.c | ||
homework-cifs.c | ||
homework-cifs.h | ||
homework-directory.c | ||
homework-directory.h | ||
homework-fscrypt.c | ||
homework-fscrypt.h | ||
homework-luks.c | ||
homework-luks.h | ||
homework-mount.c | ||
homework-mount.h | ||
homework-pkcs11.c | ||
homework-pkcs11.h | ||
homework-quota.c | ||
homework-quota.h | ||
homework.c | ||
homework.h | ||
meson.build | ||
org.freedesktop.home1.conf | ||
org.freedesktop.home1.policy | ||
org.freedesktop.home1.service | ||
pam_systemd_home.c | ||
pam_systemd_home.sym | ||
pwquality-util.c | ||
pwquality-util.h | ||
user-record-sign.c | ||
user-record-sign.h | ||
user-record-util.c | ||
user-record-util.h |