/[rdiff-backup]/rdiff-backup/rdiff_backup/Security.py
ViewVC logotype

Diff of /rdiff-backup/rdiff_backup/Security.py

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1.29 by bescoto, Tue Nov 1 04:46:16 2005 UTC revision 1.30 by bescoto, Fri Nov 4 22:41:13 2005 UTC
# Line 206  def vet_request(request, arglist): Line 206  def vet_request(request, arglist):
206          """Examine request for security violations"""          """Examine request for security violations"""
207          #if Globals.server: sys.stderr.write(str(request) + "\n")          #if Globals.server: sys.stderr.write(str(request) + "\n")
208          security_level = Globals.security_level          security_level = Globals.security_level
209            if security_level == "override": return
210          if Globals.restrict_path:          if Globals.restrict_path:
211                  for arg in arglist:                  for arg in arglist:
212                          if isinstance(arg, rpath.RPath): vet_rpath(arg)                          if isinstance(arg, rpath.RPath): vet_rpath(arg)
213                  if request.function_string in file_requests:                  if request.function_string in file_requests:
214                          vet_filename(request, arglist)                          vet_filename(request, arglist)
         if security_level == "override": return  
215          if request.function_string in allowed_requests: return          if request.function_string in allowed_requests: return
216          if request.function_string in ("Globals.set", "Globals.set_local"):          if request.function_string in ("Globals.set", "Globals.set_local"):
217                  if arglist[0] not in disallowed_server_globals: return                  if arglist[0] not in disallowed_server_globals: return

Legend:
Removed from v.1.29  
changed lines
  Added in v.1.30

savannah-hackers-public@gnu.org
ViewVC Help
Powered by ViewVC 1.1.26