#11059 NORM Not Tri: Schoolserver/Sugar may need better name sanitization for /etc/passwd

Zarro Boogs per Child bugtracker at laptop.org
Sun Jul 10 23:58:55 EDT 2011


#11059: Schoolserver/Sugar may need better name sanitization for /etc/passwd
---------------------------+------------------------------------------------
 Reporter:  greenfeld      |                 Owner:  martin.langhoff                  
     Type:  defect         |                Status:  new                              
 Priority:  normal         |             Milestone:  Not Triaged                      
Component:  school server  |               Version:  Development build as of this date
 Keywords:                 |           Next_action:  diagnose                         
 Verified:  0              |   Deployment_affected:                                   
Blockedby:                 |              Blocking:                                   
---------------------------+------------------------------------------------
 Schoolservers create a user for each XO serial number in /etc/passwd.
 This UNIX user's GECOS field is then given the exact same user name that a
 user decided to call themselves in Sugar.

 Fortunately, something seems to be bailing out when I change an XO's Sugar
 nickname to have a colon in it, and then register to them to the
 schoolserver.  Commas in the field (Lastname, Firstname) do work for
 registration, but may lead to mild GECOS confusion on the schoolserver.

 In general am not certain if /etc/passwd is guaranteed to be Unicode or
 high ASCII safe, and these characters are definitely making their way into
 /etc/passwd.

 Not related to #11056, although discovered as an aside to ponder while
 quickly trying to figure out why that was not working.

 Seen with an 0.6 schoolserver, 11.2.0 os872.

-- 
Ticket URL: <http://dev.laptop.org/ticket/11059>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system


More information about the Bugs mailing list