* Add LICENSE. * Add patches for CVE-2009-3564 from puppet's repositry. * puppet user/group handling which commented out now. * Some other pkgsrc tweak. 0.24.9 Fix for temporary file issues (https://bugzilla.redhat.com/show_bug.cgi?id=502881)
20 lines
762 B
Text
20 lines
762 B
Text
$NetBSD: patch-ae,v 1.1 2010/02/04 16:22:02 taca Exp $
|
|
|
|
Fix for CVE-2009-3564.
|
|
|
|
--- lib/puppet/util.rb.orig 2010-02-03 01:16:24.000000000 +0000
|
|
+++ lib/puppet/util.rb
|
|
@@ -58,10 +58,11 @@ module Util
|
|
end
|
|
unless Puppet::Util::SUIDManager.uid == user
|
|
begin
|
|
+ Puppet::Util::SUIDManager.initgroups(user)
|
|
Puppet::Util::SUIDManager.uid = user
|
|
Puppet::Util::SUIDManager.euid = user
|
|
- rescue
|
|
- $stderr.puts "could not change to user %s" % user
|
|
+ rescue => detail
|
|
+ $stderr.puts "Could not change to user %s: %s" % [user, detail]
|
|
exit(74)
|
|
end
|
|
end
|