comparison src/pkg.pl @ 20:c75924bd38e3

fix security hole relating to path for package user.
author Robert McIntyre <rlm@mit.edu>
date Thu, 10 Jan 2013 04:25:17 +0000
parents 4fbe69d24a9c
children d46aeb3166d0
comparison
equal deleted inserted replaced
19:4fbe69d24a9c 20:c75924bd38e3
77 ("install", "-g", $pkg_name, "-o", $pkg_name, 77 ("install", "-g", $pkg_name, "-o", $pkg_name,
78 "/pkg/hg-committer/.profile", "$pkg_home/.profile"); 78 "/pkg/hg-committer/.profile", "$pkg_home/.profile");
79 79
80 @pkg_copy_hg_wrapper_cmd = 80 @pkg_copy_hg_wrapper_cmd =
81 (install, "-g", "hg-wheel", "-o", "hg-committer", 81 (install, "-g", "hg-wheel", "-o", "hg-committer",
82 "-m", "6111", "/pkg/hg-committer/.hg-wrapper", $pkg_home); 82 "-m", "6111", "/pkg/hg-committer/hg-wrapper", "$pkg_home/.hg-wrapper");
83 83
84 sub execute{print "\t@_\n"; system(@_) and die $!;} 84 sub execute{print "\t@_\n"; system(@_) and die $!;}
85 85
86 #determine if the user already exists: 86 #determine if the user already exists:
87 `id $pkg_name 2>/dev/null`; 87 `id $pkg_name 2>/dev/null`;