51d74f777d
- fix unescaped dot in package_regex
- if any package fails verification, remove the whole directory, not
only that single package
- abort (and remove the whole directory) on any exception
- don't include file name in the error message, if it failed
verification
This, among other things, fix handling symlinks and directories sent by
potentially malicious UpdateVM. os.remove() can't remove non-empty
directories, so it would fail.
Fortunately metadata is created only after successful verification, so
dnf/yum wouldn't touch packages that failed verification and also
weren't removed. But make the code better handle such situations.
Reported-by: Hans Jerry Illikainen <hji@dyntopia.com>
(cherry picked from commit
|
||
|---|---|---|
| doc | ||
| dom0-updates | ||
| dracut | ||
| file-copy-vm | ||
| pm-utils | ||
| qrexec | ||
| qubesappmenus | ||
| rpm_spec | ||
| system-config | ||
| vaio-fixes | ||
| .gitignore | ||
| .travis.yml | ||
| Makefile | ||
| Makefile.builder | ||
| README.txt | ||
| version | ||
This package contains Linux dom0 files. Mostly there are config files for different system services, but also some "addons" to Qubes core: - udev scripts for block and USB devices exposure (in qvm-block and qvm-usb) - appmenu generation for Linux GUI (including icons)