Nikos Mavrogiannopoulos bfe0d9ffd0 requirements: add REQ-CONFIG-SEC-002 for sup-config path-traversal hardening ...

Documents the intended hardening of get_sup_config() so that
username/groupname (attacker-influenced) can no longer be used to escape
per-user-dir/per-group-dir when looking up supplemental configuration.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

2026-06-17 06:04:49 +02:00

..

requirements

requirements: add REQ-CONFIG-SEC-002 for sup-config path-traversal hardening

2026-06-17 06:04:49 +02:00

scripts

Added the STATS_DURATION script environment variable.

2014-05-04 11:20:32 +02:00

systemd

Cleanup of the logging subsystem; allow logging to stderr only

2023-12-15 13:04:40 +01:00

DCO.txt

Added contribution guide and require DCO

2017-01-10 16:52:18 +01:00

design.md

Move to a requirements-first approach

2026-06-15 18:54:38 +02:00

meson.build

Replaced autoconf with meson build files

2026-03-20 20:47:27 +01:00

occtl.8.md

occtl.8.md: document available commands

2026-03-22 12:30:04 +01:00

ocpasswd.8.md

docs: tidy up man pages

2026-01-10 18:05:02 -05:00

ocserv.8.md

ocserv.8.md: document that pid-file is available in config

2026-06-03 19:53:21 +02:00

profile.xml

Remove spaces

2022-11-28 11:22:33 +01:00

README-cisco-svc.md

Add support for Cisco IP-Phone Enterprise firmware VPN client.

2023-07-11 22:48:22 +12:00

README-oidc.md

Small doc improvements

2026-02-01 18:41:51 +01:00

README-radius.md

radius: add group-separator option for OU= Class attributes

2026-04-06 21:27:28 +02:00

sample.config

config: add syslog-facility option to allow routing logs independently

2026-06-03 19:52:36 +02:00

sample.otp

plain auth: support OTP authentication using usersfile

2015-09-25 15:03:38 +02:00

sample.passwd

Added the select-group and auto-select-group config options.

2014-05-19 18:25:25 +02:00