SOURCES: lstat-security_lstat.patch (NEW) - fixed wrong behaviour ...
arvenil
arvenil at pld-linux.org
Fri May 25 00:13:01 CEST 2007
Author: arvenil Date: Thu May 24 22:13:01 2007 GMT
Module: SOURCES Tag: HEAD
---- Log message:
- fixed wrong behaviour when no authetication option was selected
---- Files affected:
SOURCES:
lstat-security_lstat.patch (NONE -> 1.1) (NEW)
---- Diffs:
================================================================
Index: SOURCES/lstat-security_lstat.patch
diff -u /dev/null SOURCES/lstat-security_lstat.patch:1.1
--- /dev/null Fri May 25 00:13:01 2007
+++ SOURCES/lstat-security_lstat.patch Fri May 25 00:12:56 2007
@@ -0,0 +1,24 @@
+--- x/src/security_lstat.in 2006-10-01 19:28:08.000000000 +0200
++++ x/src/security_lstat.in 2007-05-24 21:56:29.000000000 +0200
+@@ -178,8 +178,8 @@
+
+ # XXX no restriction AT THIS TIME MOMENT (between unlink and create new file!!!)
+
+-create_httaccess ('LinuxStat', $htread, \@ipread, $satisfyread, $userread, $passread) if (! $noread);
+-create_httaccess ('LinuxStat-Edit', $htedit, \@ipedit, $satisfyedit, $useredit, $passedit) if ((! $noedit) && ( ! $same));
++create_httaccess ('LinuxStat', $htread, \@ipread, $satisfyread, $userread, $passread);
++create_httaccess ('LinuxStat-Edit', $htedit, \@ipedit, $satisfyedit, $useredit, $passedit) if (!$same);
+
+ #remove Lock FILE if exists
+ my $lockfile= $sysconfig{'LSTAT_LCK'};
+@@ -274,6 +274,10 @@
+ print `$htpass -m -b $flags $usersfile $user $pass`;
+ chmod 0644, $usersfile;
+ }
++ if (!@$ipref && !defined ($user)) {
++ #no auth
++ print FILE "Order deny,allow\nallow from all\n";
++ }
+ print FILE "satisfy $satisfy\n" if (defined ($satisfy));
+ close FILE;
+ chmod 0644, $htfile;
================================================================
More information about the pld-cvs-commit
mailing list