Elimination of floor (_) labeled executables and relative command paths
authorRadoslaw Bartosiak <r.bartosiak@samsung.com>
Mon, 25 Nov 2013 19:29:41 +0000 (20:29 +0100)
committerBartlomiej Grzelewski <b.grzelewski@samsung.com>
Thu, 6 Feb 2014 16:13:23 +0000 (17:13 +0100)
commit2be0939a7ce38b1106c541ac65b68d2b02c2dd8f
treeb7604c326f1d479a1bafd85f52890b12b3b38e87
parent000da5c4cb06bbacab6dfe7d2da2f91d64198a83
Elimination of floor (_) labeled executables and relative command paths

[Issue#]       SSDWSSP-684
[Bug/Feature]  A security vulnerability to attacks fixed.
[Cause]        1) Using an floor labaled exec, a malicious process can pollute the floor labelled resources.
               2) If a relative path is used a different, malicious command might be executed (PATH change)
[Solution]     The floor labaled executables and relative command paths were eliminated.
[Verification] 1) Build, install and run tests.
               2) Verify that no executables from the package has the floor label.
               3) Verify that there are no relative command paths in scripts installed by the package.

Change-Id: Ic5b948d38406c47bc424077779303636bcdc8969
packaging/security-server.manifest