netmode: prevent path traversal in pre and post from netmode.sh #1010

This commit is contained in:
Jakob Olsson 2019-08-05 14:40:24 +02:00
parent 2c42ca1377
commit d40d5139b3

View file

@ -121,6 +121,11 @@ run_netmode_scripts() {
local mode=$1
local when=$2
local script
local path
path=$(readlink -f /etc/netmodes/$mode/)
[ "${path:0:14}" == "/etc/netmodes/" ] || exit
if [ -d /etc/netmodes/$mode/scripts/$when ]; then
logger -s -p user.info -t "netmode" "Executing $when netmode scripts" >/dev/console
for script in $(ls /etc/netmodes/$mode/scripts/$when/); do