David M. Lee 99267c7a7b security: Inhibit execution of privilege escalating functions ...

This patch allows individual dialplan functions to be marked as
'dangerous', to inhibit their execution from external sources.

A 'dangerous' function is one which results in a privilege escalation.
For example, if one were to read the channel variable SHELL(rm -rf /)
Bad Things(TM) could happen; even if the external source has only read
permissions.

Execution from external sources may be enabled by setting
'live_dangerously' to 'yes' in the [options] section of asterisk.conf.
Although doing so is not recommended.

(closes issue ASTERISK-22905)
Review: http://reviewboard.digium.internal/r/432/


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@403913 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-12-16 16:36:52 +00:00

..

adsi.conf.sample

…

agents.conf.sample

Remove dead code and documentation for nonexistent feature.

2012-09-25 22:47:36 +00:00

ais.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

alarmreceiver.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

alsa.conf.sample

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

amd.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

app_mysql.conf.sample

Rename mysql.conf to app_mysql.conf, make module support both names

2009-06-30 17:10:45 +00:00

asterisk.adsi

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

asterisk.conf.sample

security: Inhibit execution of privilege escalating functions

2013-12-16 16:36:52 +00:00

calendar.conf.sample

Set a default waittime, and make sure to convert it to milliseconds

2010-11-08 19:56:10 +00:00

ccss.conf.sample

Fix a gaffe in the CCSS sample configuration.

2011-02-10 17:44:42 +00:00

cdr_adaptive_odbc.conf.sample

Set snarkiness = 0 in cdr_adaptive_odbc.conf.sample

2012-03-07 15:16:35 +00:00

cdr_custom.conf.sample

Add High Resolution Times to CDRs for Asterisk

2010-06-08 23:48:17 +00:00

cdr_manager.conf.sample

…

cdr_mysql.conf.sample

Incorrect default example; the field is actually internally named "clid", not "callerid".

2011-03-31 06:43:18 +00:00

cdr_odbc.conf.sample

Add High Resolution Times to CDRs for Asterisk

2010-06-08 23:48:17 +00:00

cdr_pgsql.conf.sample

Add missing option to set calls to be logged in GMT/UTC.

2010-10-09 23:25:37 +00:00

cdr_sqlite3_custom.conf.sample

Don't enable sqlite3 CDRs by default in sample configs.

2012-02-14 15:50:40 +00:00

cdr_syslog.conf.sample

Add High Resolution Times to CDRs for Asterisk

2010-06-08 23:48:17 +00:00

cdr_tds.conf.sample

Add High Resolution Times to CDRs for Asterisk

2010-06-08 23:48:17 +00:00

cdr.conf.sample

Add a couple of default values to the documentation of cdr.conf.

2010-08-09 12:51:43 +00:00

cel_custom.conf.sample

Add missing CEL logging fields to various CEL backends.

2012-01-13 17:12:51 +00:00

cel_odbc.conf.sample

Correct eventtype names in cel_odbc and cel_pgsql sample files

2012-01-13 21:51:03 +00:00

cel_pgsql.conf.sample

Correct eventtype names in cel_odbc and cel_pgsql sample files

2012-01-13 21:51:03 +00:00

cel_sqlite3_custom.conf.sample

Add missing CEL logging fields to various CEL backends.

2012-01-13 17:12:51 +00:00

cel_tds.conf.sample

Merge the new Channel Event Logging (CEL) subsystem.

2009-06-26 15:28:53 +00:00

cel.conf.sample

Add missing CEL logging fields to various CEL backends.

2012-01-13 17:12:51 +00:00

chan_dahdi.conf.sample

Documentation fix - waitfordialtone is not boolean, it's time in milliseconds

2013-09-11 23:47:53 +00:00

chan_mobile.conf.sample

Add an 'sms' option to mobile.conf to manually enable or disable SMS support.

2009-08-03 14:01:39 +00:00

chan_ooh323.conf.sample

generate roundtrip delay requests and responses

2010-03-14 14:42:59 +00:00

cli_aliases.conf.sample

Add 'soft hangup' alias per Steve Johnson on asterisk-users.

2010-04-20 19:02:49 +00:00

cli_permissions.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

cli.conf.sample

…

codecs.conf.sample

…

console.conf.sample

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

dbsep.conf.sample

Cleanup references to sipusers and sipfriends dynamic realtime families

2011-11-01 19:37:47 +00:00

dnsmgr.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

dsp.conf.sample

dsp.c User Configurable DTMF_HITS_TO_BEGIN and DTMF_MISSES_TO_END

2012-10-04 20:15:35 +00:00

dundi.conf.sample

Replacing doc/* and asterisk.pdf with wiki links

2011-02-02 19:27:19 +00:00

enum.conf.sample

…

extconfig.conf.sample

Modified the list of keys for the driver backends for sake of sample clarity

2013-04-08 23:34:59 +00:00

extensions_minivm.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

extensions.ael.sample

Merged revisions 252761 via svnmerge from

2010-03-16 18:48:22 +00:00

extensions.conf.sample

Merged revisions 302416 via svnmerge from

2011-01-19 15:53:20 +00:00

extensions.lua.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

features.conf.sample

Fix accidental use of tabs instead of spaces from previous features.conf.sample change

2011-12-14 20:34:31 +00:00

festival.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

followme.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

func_odbc.conf.sample

Allow multiple rows to be fetched within the normal mode of operation.

2009-09-07 17:15:37 +00:00

gtalk.conf.sample

Merged revisions 291939 via svnmerge from

2010-10-15 19:50:22 +00:00

h323.conf.sample

Add "autoframing" option to sip.conf.sample and h323.conf.sample.

2013-08-20 11:46:08 +00:00

http.conf.sample

Fix TLS port binding behavior as well as reload behavior:

2012-02-02 16:58:44 +00:00

iax.conf.sample

Document connectedline parameter for chan_iax2

2013-07-21 02:19:21 +00:00

iaxprov.conf.sample

Replacing doc/* and asterisk.pdf with wiki links

2011-02-02 19:27:19 +00:00

indications.conf.sample

Provide proper ring tone in indications.conf for Malaysia

2013-07-21 18:15:57 +00:00

jabber.conf.sample

Merged revisions 289704 via svnmerge from

2010-10-01 17:19:49 +00:00

jingle.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

logger.conf.sample

Add documentation for FAX logger level.

2010-07-26 19:51:39 +00:00

manager.conf.sample

Fix TLS port binding behavior as well as reload behavior:

2012-02-02 16:58:44 +00:00

meetme.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

mgcp.conf.sample

Replacing doc/* and asterisk.pdf with wiki links

2011-02-02 19:27:19 +00:00

minivm.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

misdn.conf.sample

Enhancements to connected line and redirecting work.

2010-05-17 15:36:31 +00:00

modules.conf.sample

Add the capability to require a module to be loaded, or else Asterisk exits.

2009-11-13 08:52:28 +00:00

musiconhold.conf.sample

Merged revisions 292049 via svnmerge from

2010-10-16 10:47:00 +00:00

muted.conf.sample

…

osp.conf.sample

Added support for indirect work mode.

2010-07-12 04:16:18 +00:00

oss.conf.sample

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

phone.conf.sample

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

phoneprov.conf.sample

res_phoneprov add snom 300, 320, 360, 370, 820, 821, 870 support

2011-02-03 15:50:35 +00:00

queuerules.conf.sample

Remove extra 'the'.

2011-06-20 18:12:32 +00:00

queues.conf.sample

Add announce-to-first-user option for app_queue

2013-06-10 14:15:19 +00:00

res_config_mysql.conf.sample

Cleanup references to sipusers and sipfriends dynamic realtime families

2011-11-01 19:37:47 +00:00

res_config_sqlite.conf.sample

Rename res_config_sqlite.conf to res_config_sqlite.conf.sample (missing .sample).

2009-06-30 17:22:16 +00:00

res_curl.conf.sample

Uncomment settings under [global], to surpress warning when loading Asterisk.

2010-11-17 14:09:38 +00:00

res_fax.conf.sample

Add 'ecm' to the sample fax config file

2010-09-29 17:53:54 +00:00

res_ldap.conf.sample

LDAP Realtime Peers Cannot Register

2012-09-06 18:54:37 +00:00

res_odbc.conf.sample

Fix documentation for default username in res_odbc

2012-09-25 13:27:43 +00:00

res_pgsql.conf.sample

Construct socket name, according to the Postgres docs, and document as such.

2010-05-26 16:14:48 +00:00

res_pktccops.conf.sample

Comment out entries in sample res_pktccops.conf.

2011-09-23 00:44:19 +00:00

res_snmp.conf.sample

Replacing doc/* with wiki links

2011-02-02 18:56:42 +00:00

res_stun_monitor.conf.sample

Re-resolve the STUN address if a STUN poll fails for res_stun_monitor.

2011-12-01 21:11:39 +00:00

rtp.conf.sample

Adds pjmedia probation concepts to res_rtp_asterisk's learning mode.

2012-01-17 16:55:41 +00:00

say.conf.sample

Merged revisions 284317 via svnmerge from

2010-08-31 19:00:15 +00:00

sip_notify.conf.sample

Add Digium phones context to sip_notify sample config.

2012-07-09 17:05:47 +00:00

sip.conf.sample

chan_sip: Allow Asterisk to retry after 403 on register

2013-09-30 15:19:23 +00:00

skinny.conf.sample

Merged revisions 314620 via svnmerge from

2011-04-21 18:24:05 +00:00

sla.conf.sample

astobj2-ify the SLA code

2013-07-10 01:41:42 +00:00

smdi.conf.sample

Fix references to /etc/dahdi/system.conf and /etc/asterisk/chan_dahdi.conf in

2009-05-27 16:07:57 +00:00

telcordia-1.adsi

Remove a bunch of trailing whitespace in preparation for reformatting/cleanup.

2009-05-28 14:39:21 +00:00

udptl.conf.sample

Allow non-compliant T.38 endpoints to be supportable via configuration option.

2009-10-05 19:45:00 +00:00

unistim.conf.sample

Replacing doc/* and asterisk.pdf with wiki links

2011-02-02 19:27:19 +00:00

users.conf.sample

Merged revisions 300431 via svnmerge from

2011-01-04 21:00:55 +00:00

voicemail.conf.sample

Fixes some voicemail forwarding behavior based around prepend mode.

2011-07-26 13:25:35 +00:00

vpb.conf.sample

Fix references to /etc/dahdi/system.conf and /etc/asterisk/chan_dahdi.conf in

2009-05-27 16:07:57 +00:00