mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-31 22:35:10 +00:00
Code Issues Releases Wiki Activity

Switch to a 128-bit token instead of a 64-bit secret.

Browse Source 
Protobuf doesn't have a 128-bit type so use two u64s.
We now support partial reads of the token.
This commit is contained in:
Todd C. Miller
2021-09-01 10:17:26 -06:00
parent 4bff82cab4
commit 9a690a8984
6 changed files with 84 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
include/intercept.pb-c.h
View File

@@ -57,7 +57,7 @@ struct _InterceptRequest
/*
* Hello message from sudo_intercept.so to main sudo process.
* Sudo sends back the secret and localhost port number.
* Sudo sends back the token and localhost port number.
*/
struct _ClientHello
{
@@ -71,17 +71,18 @@ struct _ClientHello
/*
* Sudo response to a ClientHello from sudo_intercept.so.
* The client uses the port number and secret to connect back to sudo.
* The client uses the port number and token to connect back to sudo.
*/
struct _HelloResponse
{
ProtobufCMessage base;
uint64_t secret;
uint64_t token_lo;
uint64_t token_hi;
int32_t portno;
};
#define HELLO_RESPONSE__INIT \
{ PROTOBUF_C_MESSAGE_INIT (&hello_response__descriptor) \
, 0, 0 }
, 0, 0, 0 }
/*