diff options
| author | Andreas Brodmann <andreas.brodmann@gmail.com> | 2007-11-09 09:12:16 +0000 |
|---|---|---|
| committer | Andreas Brodmann <andreas.brodmann@gmail.com> | 2007-11-09 09:12:16 +0000 |
| commit | 38d0619307385dcda96d963a75526c89aba65ecb (patch) | |
| tree | 757e377aa94e43baf9d83f414b0676e3db2112f7 /dhcp-controller.lua | |
| parent | 400572b81c8f1667f0d80518dd90206ef22b7af4 (diff) | |
| download | acf-dhcp-38d0619307385dcda96d963a75526c89aba65ecb.tar.bz2 acf-dhcp-38d0619307385dcda96d963a75526c89aba65ecb.tar.xz | |
fixed remote exploit via popen
git-svn-id: svn://svn.alpinelinux.org/acf/dhcp/trunk@289 ab2d0c66-481e-0410-8bed-d214d4d58bed
Diffstat (limited to 'dhcp-controller.lua')
| -rw-r--r-- | dhcp-controller.lua | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/dhcp-controller.lua b/dhcp-controller.lua index 671e0b3..35014c4 100644 --- a/dhcp-controller.lua +++ b/dhcp-controller.lua @@ -115,7 +115,10 @@ home = function ( self ) local srvctrl = "" if self.clientdata.srvcmd then - srvctrl = self.model.service_control(self.clientdata.srvcmd) + srvcmd = self.clientdata.srvcmd + if srvcmd == "start" or srvcmd == "stop" or srvcmd == "restart" then + srvctrl = self.model.service_control(self.clientdata.srvcmd) + end end local option = { script = ENV["SCRIPT_NAME"], |