e5e006d933
- fix unescaped dot in package_regex - if any package fails verification, remove the whole directory, not only that single package - abort (and remove the whole directory) on any exception - don't include file name in the error message, if it failed verification This, among other things, fix handling symlinks and directories sent by potentially malicious UpdateVM. os.remove() can't remove non-empty directories, so it would fail. Fortunately metadata is created only after successful verification, so dnf/yum wouldn't touch packages that failed verification and also weren't removed. But make the code better handle such situations. Reported-by: Hans Jerry Illikainen <hji@dyntopia.com> |
||
|---|---|---|
| doc | ||
| dom0-updates | ||
| dracut | ||
| file-copy-vm | ||
| pm-utils | ||
| qubes-rpc | ||
| qubes-rpc-policy | ||
| qubesappmenus | ||
| rpm_spec | ||
| system-config | ||
| vaio-fixes | ||
| .gitignore | ||
| .travis.yml | ||
| Makefile | ||
| Makefile.builder | ||
| README.txt | ||
| version | ||
This package contains Linux dom0 files. Mostly there are config files for different system services, but also some "addons" to Qubes core: - udev scripts for block and USB devices exposure (in qvm-block and qvm-usb) - appmenu generation for Linux GUI (including icons)