Ondřej Surý 263d232c79 Replace isc_fsaccess API with more secure file creation ... The isc_fsaccess API was created to hide the implementation details between POSIX and Windows APIs. As we are not supporting the Windows APIs anymore, it's better to drop this API used in the DST part. Moreover, the isc_fsaccess was setting the permissions in an insecure manner - it operated on the filename, and not on the file descriptor which can lead to all kind of attacks if unpriviledged user has read (or even worse write) access to key directory. Replace the code that operates on the private keys with code that uses mkstemp(), fchmod() and atomic rename() at the end, so at no time the private key files have insecure permissions.		2023-03-31 12:52:59 +00:00
..
dns	Replace isc_fsaccess API with more secure file creation	2023-03-31 12:52:59 +00:00
isc	Replace isc_fsaccess API with more secure file creation	2023-03-31 12:52:59 +00:00
isccc	Apply adjusted clang-format	2023-03-10 17:31:28 +01:00
isccfg	allow configuration of dnsrps library path	2023-03-28 15:44:31 -07:00
ns	Apply the semantic patch to remove isc_stdtime_get()	2023-03-31 13:32:56 +02:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00