pkgsrc/sysutils/bacula-doc/patches/patch-ae
tonnerre d842237cd2 Add patches "solving" the issue of bacula exposing passwords et cetera
through the command line parameters of various tools (CVE-2007-5626).
2008-07-13 15:26:36 +00:00

13 lines
566 B
Text

$NetBSD: patch-ae,v 1.1 2008/07/13 15:26:36 tonnerre Exp $
--- manual/strategies.tex.orig 2007-01-15 10:37:15.000000000 +0100
+++ manual/strategies.tex
@@ -232,6 +232,8 @@ Job {
Messages = Standard
Pool = Default
# This creates an ASCII copy of the catalog
+ # WARNING!!! Passing the password via the command line is insecure.
+ # see comments in make_catalog_backup for details.
RunBeforeJob = "/usr/lib/bacula/make_catalog_backup -u bacula"
# This deletes the copy of the catalog, and ejects the tape
RunAfterJob = "/etc/bacula/end_of_backup.sh"