#11059 NORM Not Tri: Schoolserver/Sugar may need better name sanitization for /etc/passwd
Zarro Boogs per Child
bugtracker at laptop.org
Sun Jul 10 23:58:55 EDT 2011
#11059: Schoolserver/Sugar may need better name sanitization for /etc/passwd
---------------------------+------------------------------------------------
Reporter: greenfeld | Owner: martin.langhoff
Type: defect | Status: new
Priority: normal | Milestone: Not Triaged
Component: school server | Version: Development build as of this date
Keywords: | Next_action: diagnose
Verified: 0 | Deployment_affected:
Blockedby: | Blocking:
---------------------------+------------------------------------------------
Schoolservers create a user for each XO serial number in /etc/passwd.
This UNIX user's GECOS field is then given the exact same user name that a
user decided to call themselves in Sugar.
Fortunately, something seems to be bailing out when I change an XO's Sugar
nickname to have a colon in it, and then register to them to the
schoolserver. Commas in the field (Lastname, Firstname) do work for
registration, but may lead to mild GECOS confusion on the schoolserver.
In general am not certain if /etc/passwd is guaranteed to be Unicode or
high ASCII safe, and these characters are definitely making their way into
/etc/passwd.
Not related to #11056, although discovered as an aside to ponder while
quickly trying to figure out why that was not working.
Seen with an 0.6 schoolserver, 11.2.0 os872.
--
Ticket URL: <http://dev.laptop.org/ticket/11059>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system
More information about the Bugs
mailing list