Mercurial > pkg
comparison src/pkg.pl @ 20:c75924bd38e3
fix security hole relating to path for package user.
author | Robert McIntyre <rlm@mit.edu> |
---|---|
date | Thu, 10 Jan 2013 04:25:17 +0000 |
parents | 4fbe69d24a9c |
children | d46aeb3166d0 |
comparison
equal
deleted
inserted
replaced
19:4fbe69d24a9c | 20:c75924bd38e3 |
---|---|
77 ("install", "-g", $pkg_name, "-o", $pkg_name, | 77 ("install", "-g", $pkg_name, "-o", $pkg_name, |
78 "/pkg/hg-committer/.profile", "$pkg_home/.profile"); | 78 "/pkg/hg-committer/.profile", "$pkg_home/.profile"); |
79 | 79 |
80 @pkg_copy_hg_wrapper_cmd = | 80 @pkg_copy_hg_wrapper_cmd = |
81 (install, "-g", "hg-wheel", "-o", "hg-committer", | 81 (install, "-g", "hg-wheel", "-o", "hg-committer", |
82 "-m", "6111", "/pkg/hg-committer/.hg-wrapper", $pkg_home); | 82 "-m", "6111", "/pkg/hg-committer/hg-wrapper", "$pkg_home/.hg-wrapper"); |
83 | 83 |
84 sub execute{print "\t@_\n"; system(@_) and die $!;} | 84 sub execute{print "\t@_\n"; system(@_) and die $!;} |
85 | 85 |
86 #determine if the user already exists: | 86 #determine if the user already exists: |
87 `id $pkg_name 2>/dev/null`; | 87 `id $pkg_name 2>/dev/null`; |