pkgsrc/sysutils/puppet/patches/patch-ae
taca 661b3fb52e Update sysutils/puppet to 0.24.9.
* Add LICENSE.
* Add patches for CVE-2009-3564 from puppet's repositry.
* puppet user/group handling which commented out now.
* Some other pkgsrc tweak.

0.24.9
    Fix for temporary file issues
    (https://bugzilla.redhat.com/show_bug.cgi?id=502881)
2010-02-04 16:22:02 +00:00

20 lines
762 B
Text

$NetBSD: patch-ae,v 1.1 2010/02/04 16:22:02 taca Exp $
Fix for CVE-2009-3564.
--- lib/puppet/util.rb.orig 2010-02-03 01:16:24.000000000 +0000
+++ lib/puppet/util.rb
@@ -58,10 +58,11 @@ module Util
end
unless Puppet::Util::SUIDManager.uid == user
begin
+ Puppet::Util::SUIDManager.initgroups(user)
Puppet::Util::SUIDManager.uid = user
Puppet::Util::SUIDManager.euid = user
- rescue
- $stderr.puts "could not change to user %s" % user
+ rescue => detail
+ $stderr.puts "Could not change to user %s: %s" % [user, detail]
exit(74)
end
end