d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8d2dbd281f
freebsd-skq/usr.sbin/pw
History
Ed Maste 8d2dbd281f pw useradd: Validate the user name before creating the entry 
Previouly it was possible to create users with spaces in the name with:
pw useradd -u 1234 -g 1234 -n 'test user'

The "-g 1234" is relevant, without it the name was already rejected
as expected:

[fk@test ~]$ sudo pw useradd -u 1234 -n 'test user'
pw: invalid character ` ' at position 4 in userid/group name

Bug unintentionally found with a salt config without explicit name entry:

test user:
  user.present:
    - uid: 1234
    - gid: 1234
    - fullname: Test user
    - shell: /usr/local/bin/bash
    - home: /home/test
    - groups:
      - wheel
      - salt

"Luckily" salt modules rarely bother with input validation either ...

PR:		221416
Submitted by:	Fabian Keil
Obtained from:	ElectroBSD
MFC after:	1 week
2017-08-19 00:32:26 +00:00
..
tests pw useradd: Validate the user name before creating the entry 2017-08-19 00:32:26 +00:00
bitmap.c
bitmap.h de-__P() 2002-07-11 19:07:35 +00:00
cpdir.c Remove some unneeded headers 2016-03-26 11:41:35 +00:00
grupd.c Speed up pw operations that edit /etc/group or /etc/passwd 2016-11-18 16:07:08 +00:00
Makefile Add HAS_TESTS to all Makefiles that are currently using the 2017-08-02 08:50:42 +00:00
Makefile.depend Add META_MODE support. 2015-06-13 19:20:56 +00:00
psdate.c Really restore the old behaviour for pw usermod -m 2017-01-22 20:03:18 +00:00
psdate.h
pw_conf.c pw should sanitize the argument of -w. 2016-07-13 17:09:20 +00:00
pw_group.c Fix pkg groupshow <gid> 2016-12-10 12:48:48 +00:00
pw_log.c Fix CID 1006692 in /usr/sbin/pw pw_log() function and other fixes 2016-05-24 05:02:24 +00:00
pw_nis.c Speed up pw operations that edit /etc/group or /etc/passwd 2016-11-18 16:07:08 +00:00
pw_user.c pw useradd: Validate the user name before creating the entry 2017-08-19 00:32:26 +00:00
pw_utils.c Remove some unneeded headers 2016-03-26 11:41:35 +00:00
pw_vpw.c Fix up setgrent(3) to have a POSIX-compliant prototype. 2016-07-31 08:05:15 +00:00
pw.8 Add another badly-needed simple example to the pw(8) man page. 2016-09-13 02:18:29 +00:00
pw.c Fix a repeated typo: rootir -> rootdir. 2015-10-09 14:55:55 +00:00
pw.conf.5
pw.h Remove usage of _WITH_GETLINE from usr.sbin 2016-07-30 01:10:05 +00:00
pwupd.c Speed up pw operations that edit /etc/group or /etc/passwd 2016-11-18 16:07:08 +00:00
pwupd.h Fix up setgrent(3) to have a POSIX-compliant prototype. 2016-07-31 08:05:15 +00:00
README
rm_r.c Do not try to delete the home of the user if is is not a directory for example 2016-07-23 10:19:10 +00:00
strtounum.c Fix err pointer not initialized to NULL resulting 2015-08-21 14:28:14 +00:00

README 

pw is a command-line driven passwd/group editor utility that provides
an easy and safe means of modifying of any/all fields in the system
password files, and has an add, modify and delete mode for user and
group records. Command line options have been fashioned to be similar
to those used by the Sun/shadow commands: useradd, usermod, userdel,
groupadd, groupmod, groupdel, but combines all operations within the
single command `pw'.

User add mode also provides a means of easily setting system useradd
defaults (see pw.conf.5), so that adding a user is as easy as issuing
the command "pw useradd <loginid>". Creation of a unique primary
group for each user and automatic membership in secondary groups
is fully supported.

This program may be FreeBSD specific, but should be trivial to port to
other bsd4.4 variants.

Author and maintainer: David L. Nugent, <davidn@blaze.net.au>

$FreeBSD$