mirror of
https://dev.iopsys.eu/feed/iopsys.git
synced 2025-12-10 07:44:50 +01:00
netmode: prevent path traversal in pre and post from netmode.sh #1010
This commit is contained in:
parent
2c42ca1377
commit
d40d5139b3
1 changed files with 5 additions and 0 deletions
|
|
@ -121,6 +121,11 @@ run_netmode_scripts() {
|
|||
local mode=$1
|
||||
local when=$2
|
||||
local script
|
||||
local path
|
||||
|
||||
path=$(readlink -f /etc/netmodes/$mode/)
|
||||
[ "${path:0:14}" == "/etc/netmodes/" ] || exit
|
||||
|
||||
if [ -d /etc/netmodes/$mode/scripts/$when ]; then
|
||||
logger -s -p user.info -t "netmode" "Executing $when netmode scripts" >/dev/console
|
||||
for script in $(ls /etc/netmodes/$mode/scripts/$when/); do
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue