From 75ac01632e687ed298452925db7d10a82cc10355 Mon Sep 17 00:00:00 2001 From: dgaudet Date: Sun, 29 Jan 2006 21:36:03 +0000 Subject: Fix a security violation when restoring from a remote repository. (Patch from Charles Duffy.) git-svn-id: http://svn.savannah.nongnu.org/svn/rdiff-backup/branches/r1-0@752 2b77aa54-bcbc-44c9-a7ec-4f6cf2b41109 --- rdiff-backup/CHANGELOG | 2 ++ rdiff-backup/rdiff_backup/Security.py | 1 + 2 files changed, 3 insertions(+) diff --git a/rdiff-backup/CHANGELOG b/rdiff-backup/CHANGELOG index 08595ed..c9d4f25 100644 --- a/rdiff-backup/CHANGELOG +++ b/rdiff-backup/CHANGELOG @@ -3,6 +3,8 @@ New in v1.0.5 (????/??/??) Fix a traceback due to an off-by-1 error in "--remove-older-than nB". +Fix a security violation when restoring from a remote repository. +(Patch from Charles Duffy.) New in v1.0.4 (2006/01/15) -------------------------- diff --git a/rdiff-backup/rdiff_backup/Security.py b/rdiff-backup/rdiff_backup/Security.py index 1ab44dd..ecd668a 100644 --- a/rdiff-backup/rdiff_backup/Security.py +++ b/rdiff-backup/rdiff_backup/Security.py @@ -139,6 +139,7 @@ def set_allowed_requests(sec_level): if sec_level == "read-only" or sec_level == "all": l.extend(["fs_abilities.get_fsabilities_readonly", "fs_abilities.get_fsabilities_restoresource", + "restore.MirrorStruct.get_increment_times", "restore.MirrorStruct.set_mirror_and_rest_times", "restore.MirrorStruct.set_mirror_select", "restore.MirrorStruct.initialize_rf_cache", -- cgit v1.2.1