certbot/certbot-apache/certbot_apache
Adrien Ferrand ab76834100 [Windows|Linux] Forbid os.stat and os.fstat (#7325)
Fixes #7212

This PR forbid os.stat and os.fstat, and fix or provide alternatives to avoid its usage in certbot outside of certbot.compat.filesystem.

* Reimplement private key mode propagation

* Remove other os.stat

* Remove last call of os.stat in certbot package

* Forbid stat and fstat

* Implement mode comparison checks

* Add unit tests

* Update certbot/compat/filesystem.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>

* Update certbot/compat/filesystem.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>

* Handle case where multiple ace concerns a given SID in has_min_permissions

* Add a new test scenario

* Add a simple test for has_same_ownership

* Fix name function

* Add a comment explaining an ACE structure

* Move a test in its dedicated class

* Improve a message error

* Calculate has_min_permission result using effective permission rights to be more generic.

* Change an exception message

* Add comments, avoid to skip a test.

* Update certbot/compat/filesystem.py

Co-Authored-By: Brad Warren <bmw@users.noreply.github.com>
2019-09-06 14:30:25 -07:00
..
augeas_lens Update Augeas lens to fix some Apache configuration parsing issues (#6438) 2018-10-31 09:34:14 -07:00
tests [Windows|Linux] Forbid os.stat and os.fstat (#7325) 2019-09-06 14:30:25 -07:00
__init__.py s/Let's Encrypt/Certbot certbot-apache 2016-04-13 16:36:53 -07:00
apache_util.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
centos-options-ssl-apache.conf Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
configurator.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
constants.py Disable TLS session tickets for Apache 2.4.11+ (#7191) 2019-07-29 22:54:51 +03:00
display_ops.py [Windows] Security model for files permissions - STEP 2 (#6895) 2019-04-12 13:32:51 -07:00
entrypoint.py Fix Certbot's Apache plugin doesn't work on Scientific Linux (#7294) 2019-08-12 12:59:29 -07:00
http_01.py [Windows] Security model for files permissions - STEP 3d (#6968) 2019-07-03 16:20:43 -07:00
obj.py Fix Pylint upgrade issues 2018-05-16 20:37:39 +00:00
options-ssl-apache.conf Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_arch.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_centos.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_darwin.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_debian.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_fedora.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_gentoo.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
override_suse.py Revert disabling TLS session tickets in Apache (#7315) 2019-08-08 16:23:37 -07:00
parser.py Refactor augeas_configurator.py functionality to configurator.py and parser.py accordingly. (#7181) 2019-06-28 08:39:13 -07:00