michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-07-23 02:00:27 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
Files
dev/fix-acls-tightening
webmin/custom
History
Ilia Ross 301722b572 Fix to tighten privileged ACL checks 
This PR addresses privately reported issue and tries to restricts root/UID 0 user mutations and Custom Commands definition editing to full, non-safe Webmin admins.

This closes privilege-escalation paths for restricted operators while preserving execution of pre-approved Custom Commands under existing cmds ACLs.
2026-06-28 00:05:21 +02:00
..
help
Revert "Dev: Testing build script issues for separate modules"
2025-09-17 04:30:23 +03:00
images
Remove small icons that are never used
2018-11-25 17:16:12 -08:00
lang
Remove languages with 0% coverage
2025-02-12 13:19:49 +02:00
acl_security.pl
Use new UI library for acl editing
2017-11-27 08:47:15 -08:00
backup_config.pl
Allow backups of custom commands http://virtualmin.com/node/33021
2014-04-24 21:23:17 -07:00
cgi_args.pl
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
CHANGELOG
Add new parameter type which is actually a submit button
2011-11-30 21:42:43 -08:00
config
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config-ALL-linux
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ca
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.cs
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.de
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.es
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.fr
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.hr
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.it
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ko
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ms
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.nl
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.no
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.pl
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
config.info.ru
Language Transform: All modules transcode (config) to new UTF-8 format
2020-02-28 16:08:10 +03:00
config.info.sk
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.tr
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.uk
Language Transform: All modules transcode (config) to new UTF-8 format
2020-02-28 16:08:10 +03:00
custom-lib.pl
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
defaultacl
…
edit_cmd.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
edit_file.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
edit_sql.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
feedback_files.pl
Fix permissions
2009-07-20 23:42:32 -07:00
form.cgi
Fix forms column for Custom Commands module
2021-11-09 15:39:50 +03:00
index.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
log_parser.pl
Fix permissions
2009-07-20 23:42:32 -07:00
module.info
Remove obsolete code for module risk levels
2019-12-05 13:12:52 -08:00
module.info.ar
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ar.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.bg
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.bg.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ca
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.ca.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.cs
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.cs.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.da
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.da.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.de
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.de.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.el
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.el.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.es
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.es.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.eu
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.eu.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fa
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fa.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fi
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fi.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fr
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.fr.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hr
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hr.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hu
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.hu.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.it
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.it.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ja
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ja.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ko
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ko.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ms
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ms.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.nl
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.nl.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.no
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.no.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pl
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pl.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.pt_BR
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt_BR.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.pt.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ru
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.ru.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sk
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sk.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.sv
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.sv.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.tr
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.tr.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.uk
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.uk.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh_TW
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh_TW.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
module.info.zh.auto
Language Transform: All modules transcode/translate (module.info) to new UTF-8 format 1/3
2020-02-28 18:59:13 +03:00
prefs.info
Drop columns from Custom Commands module
2021-11-09 12:54:52 +03:00
run.cgi
Support possible media streaming in progressive output https://github.com/webmin/webmin/issues/1250 75517a865d
2020-06-25 13:30:19 +03:00
save_cmd.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
save_file.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
save_sql.cgi
Fix to tighten privileged ACL checks
2026-06-28 00:05:21 +02:00
save.cgi
Fail if before or after editing or saving command exits with non-zero status
2011-08-26 17:45:16 -07:00
sql.cgi
Link by ids rather than indexes
2008-04-23 17:41:36 +00:00
sqlform.cgi
Fix forms column for Custom Commands module
2021-11-09 15:39:50 +03:00
view.cgi
Fail if before or after editing or saving command exits with non-zero status
2011-08-26 17:45:16 -07:00