Integrated: 8356997: /etc/krb5.conf parser should not forbid include/includedir directives after sections
Weijun Wang
weijun at openjdk.org
Wed Jul 23 12:27:11 UTC 2025
On Fri, 23 May 2025 18:41:17 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Several changes are made:
>
> 1. The "include" and "includedir" directives can appear everywhere, even inside a section or a sub-section. However, it only means the content is inserted here but the included file still need its own full structure -- from section to subsections.
> 2. The same file can be included multiple times as long as not recursively.
> 3. Everything is merged. For duplicated values, `get` returns the first one and `getAll` returns all joining by spaces.
>
> Two new tests added. I also separately confirmed that they are parsed in the same way as [MIT krb5](https://github.com/krb5/krb5/blob/master/src/util/profile/test_parse.c). MIT krb5 ignores directory name after "include" but here it's an error.
This pull request has now been integrated.
Changeset: 06f9ff04
Author: Weijun Wang <weijun at openjdk.org>
URL: https://git.openjdk.org/jdk/commit/06f9ff047f1d1e832d7379f9750237749479b020
Stats: 524 lines in 4 files changed: 416 ins; 37 del; 71 mod
8356997: /etc/krb5.conf parser should not forbid include/includedir directives after sections
Reviewed-by: valeriep
-------------
PR: https://git.openjdk.org/jdk/pull/25421
More information about the security-dev
mailing list