From a1baec0f6b96f7735c94d2f663b3dc4f26f9aaaa Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Mon, 16 Dec 2013 10:21:28 +0000 Subject: abuild-sudo: forbid use of --allow-untrusted It means that home built packages cannot be installed with abuild-apk unless the key is installed system-wide. --- abuild-sudo.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'abuild-sudo.c') diff --git a/abuild-sudo.c b/abuild-sudo.c index 2f34f3d..f3479fc 100644 --- a/abuild-sudo.c +++ b/abuild-sudo.c @@ -68,6 +68,7 @@ int main(int argc, const char *argv[]) struct group *grent; const char *cmd; const char *path; + int i; grent = getgrnam(ABUILD_GROUP); if (grent == NULL) @@ -85,6 +86,11 @@ int main(int argc, const char *argv[]) if (path == NULL) errx(1, "%s: Not a valid subcommand", cmd); + /* we dont allow --allow-untrusted option */ + for (i = 1; i < argc; i++) + if (strcmp(argv[i], "--allow-untrusted") == 0) + errx(1, "%s: not allowed option", "--allow-untrusted"); + argv[0] = path; /* set our uid to root so bbsuid --install works */ setuid(0); -- cgit v1.2.3