kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-09-04 20:04:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

manager: prevent file access outside of config dir

Browse Source 
Add live_dangerously flag to manager and use this flag to
determine if a configuation file outside of AST_CONFIG_DIR
should be read.

ASTERISK-30176

Change-Id: I46b26af4047433b49ae5c8a85cb8cda806a07404
This commit is contained in:
Mike Bradeen
2022-10-03 12:54:40 -06:00
committed by Friendly Automation
parent 993ebe302b
commit 282e1cbf9f
5 changed files with 70 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
include/asterisk/manager.h
View File

@@ -350,6 +350,18 @@ void astman_send_list_complete_start(struct mansession *s, const struct message
*/
void astman_send_list_complete_end(struct mansession *s);
/*!
* \brief Enable/disable the inclusion of 'dangerous' configurations outside
* of the ast_config_AST_CONFIG_DIR
*
* This function can globally enable/disable the loading of configuration files
* outside of ast_config_AST_CONFIG_DIR.
*
* \param new_live_dangerously If true, enable the access of files outside
* ast_config_AST_CONFIG_DIR from astman.
*/
void astman_live_dangerously(int new_live_dangerously);
void __attribute__((format(printf, 2, 3))) astman_append(struct mansession *s, const char *fmt, ...);
/*! \brief Determine if a manager session ident is authenticated */