Skip to content
GitLab
Switch branch/tag
  1. 30 Nov, 2014 1 commit
  3. 29 Nov, 2014 1 commit
  5. 20 Nov, 2014 1 commit
  7. 07 Nov, 2014 2 commits
  9. 31 Oct, 2014 2 commits
  11. 18 Oct, 2014 1 commit
  13. 09 Oct, 2014 1 commit
  15. 06 May, 2014 1 commit
    • Thomas B. Rücker's avatar
      SECURITY FIX - Override supplementary groups · 53e6ee7a
      Thomas B. Rücker authored 
      In case of <changeowner> only UID and GID were changed, 
supplementary groups were left in place.
This is a potential security issue only if <changeowner> is used.
New behaviour is to set UID, GID and set supplementary groups 
based on the UID
Even in case of icecast remaining in supplementary group 0 
this "only" gives it things like access to files that are owned 
by group 0 and according to their umask. This is obviously bad,
but not as bad as UID 0 with all its other special rights.
It's a security issue and we fix immediately and recommend users to update.

PS: Cherry picking this should be fine by distros for fixing older releases.

svn path=/icecast/trunk/icecast/; revision=19137
      53e6ee7a
  17. 01 Mar, 2014 1 commit
  19. 15 May, 2013 1 commit
    • Thomas B. Rücker's avatar
      This patch closes ticket #1886. · 5a269462
      Thomas B. Rücker authored 
      I've rethought the approach and found a much cleaner way. 
We now split handling of command line arguments into two parts.
Only the critical part of getting the config file is done first (and -v as it prevents startup).
The rest (currently only -b) is deferred.

This achieves the important bit why #1886 was created. 
It allows us to log error messages to stderr even if the -b argument is passed.
This is mainly for the case where the logfile or TCP port can't be opened.

svn path=/icecast/trunk/icecast/; revision=18945
      5a269462
  21. 02 Apr, 2013 2 commits
  23. 12 Nov, 2012 1 commit
  25. 12 Oct, 2012 1 commit
  27. 11 Oct, 2012 3 commits
  29. 10 Oct, 2012 1 commit
  31. 05 Aug, 2009 1 commit
  33. 08 Jan, 2009 1 commit
  35. 02 May, 2008 1 commit
  37. 11 Feb, 2008 1 commit
  39. 23 Nov, 2007 1 commit
  41. 16 Oct, 2007 1 commit
  43. 17 Dec, 2005 3 commits
  45. 24 Oct, 2005 1 commit
    • Ed "oddsock" Zaleski's avatar
      2 new features to icecast logging: · 3a85a143
      Ed "oddsock" Zaleski authored 
      - logsize : specify in KB the max size of any of icecast log files
- logarchive : causes icecast to rename logs with timestamps (for proper archiving)


svn path=/icecast/trunk/icecast/; revision=10287
      3a85a143
  47. 16 Sep, 2005 1 commit
  49. 16 Aug, 2005 1 commit
  51. 12 Aug, 2005 1 commit
  53. 11 Aug, 2005 1 commit
  55. 07 Aug, 2005 1 commit
    • Karl Heyes's avatar
      Initial auth merge. Add an auth thread (multiple threads can be done later) · 15b3a5f8
      Karl Heyes authored 
      which can be used to handle authentication mechanisms without taking locks
for long periods.  Non-authenticated mountpoints bypass the auth thread.

The lookup/checking of the source_t is done after the authentication succeeds
so the fallback mechanism does not affect which authenticator is used. This
can be extended to allow us to authenticate in webroot as well. XML re-read
changes will take effect immediately for new listeners but existing listeners
will use the original auth_t (refcounted) when they exit.

htpasswd access has been seperated out from auth.c, and implements an AVL
tree for a faster username lookup.  The htpasswd file timestamp is checked
just in case there are changes made externally

svn path=/icecast/trunk/icecast/; revision=9713
      15b3a5f8
  57. 26 May, 2005 1 commit
  59. 24 Feb, 2005 1 commit
  61. 16 Nov, 2004 1 commit
  63. 12 Oct, 2004 1 commit
  65. 10 Aug, 2004 1 commit