View | Details | Raw Unified | Return to bug 44054 | Differences between
and this patch

Collapse All | Expand All

(-)a/base/univention-lib/debian/python-univention-lib.postinst (-1 / +1 lines)
 Lines 60-66   else: Link Here 
60 
		for path in attr.get('univentionSharePath', []):
 60 
		for path in attr.get('univentionSharePath', []):
61 
			directory = os.path.realpath(path)
 61 
			directory = os.path.realpath(path)
62 
			if univention.lib.listenerSharePath.is_blacklisted(directory, ucr):
 62 
			if univention.lib.listenerSharePath.is_blacklisted(directory, ucr):
63 
				print('WARNING: the path %s for share %s matches a blacklisted path: You should execute: ucr set listener/shares/whitelist/%s=%s' % (path, dn, pipes.quote(univention.uldap.explodeDn(dn, True)[0]), pipes.quote(directory)))
 63 
				print('WARNING: the path %s for share %s matches a blacklisted path: You should execute: "ucr set listener/shares/whitelist/%s=%s" and then restart univention-directory-listener.' % (path, dn, pipes.quote(univention.uldap.explodeDn(dn, True)[0]), pipes.quote(directory)))
64 
EOL
 64 
EOL
65 

          65
          

        

        

          66
          
fi

          66
          
fi

        



(-)a/base/univention-lib/debian/python-univention-lib.univention-config-registry-variables
      (-2 / +2 lines)




  

    

    

       Lines 12-19
      Type=str 
    
  Link Here 
    

  

        

          12
          
Categories=service-misc

          12
          
Categories=service-misc

        

        

          13
          

          13
          

        

        

          14
          
[listener/shares/whitelist/.*]

          14
          
[listener/shares/whitelist/.*]

        

          
            

              15
              
Description[de]=Standardmäßig wird die Erstellung von Freigaben für einige Systemverzeichnisse verhindert. Diese Variablen ermöglichen das Freigeben von Verzeichnissen, die sonst auf der Standard-Blackist stehen. Die Werte der Variablen können eine durch Doppelpunkte separierte Liste von erlaubten Verzeichnissen enthalten (z.B. /var/*:/usr/*). Die Variable listener/shares/whitelist/default liefert eine empfohlene Standardliste für UCS.


              15
              
Description[de]=Standardmäßig wird die Erstellung von Freigaben für einige Systemverzeichnisse verhindert. Diese Variablen ermöglichen das Freigeben von Verzeichnissen, die sonst auf der Standard-Blackist stehen. Die Werte der Variablen können eine durch Doppelpunkte separierte Liste von erlaubten Verzeichnissen enthalten (z.B. /var/*:/usr/*). Die Variable listener/shares/whitelist/default liefert eine empfohlene Standardliste für UCS. Nach Änderung der Variablen muss univention-directory-listener neu gestartet werden.

            

            

              16
              
Description[en]=For security reasons creating shares for some system directories is denied by default. This family of variables allows overriding the default blacklist. The values may contain a colon separated list of allowed directories (e.g. /var/*:/usr/*). The variable listener/shares/whitelist/default specifies the UCS recommended default whitelist.


              16
              
Description[en]=For security reasons creating shares for some system directories is denied by default. This family of variables allows overriding the default blacklist. The values may contain a colon separated list of allowed directories (e.g. /var/*:/usr/*). The variable listener/shares/whitelist/default specifies the UCS recommended default whitelist. After changing the variables univention-directory-listener needs to be restarted.

            

        

          17
          
Type=str

          17
          
Type=str

        

        

          18
          
Categories=service-misc

          18
          
Categories=service-misc

        

        

          19
          

          19
          

        



(-)a/base/univention-lib/python/listenerSharePath.py
      (-2 / +2 lines)




  

    

    

       Lines 172-180
      def createOrRename(old, new, cr): 
    
  Link Here 
    

  

        

          172
          

          172
          

        

        

          173
          
		# check blacklist

          173
          
		# check blacklist

        

        

          174
          
		if is_blacklisted(newPath, cr):

          174
          
		if is_blacklisted(newPath, cr):

        

          
            

              175
              
			return "%r as destination for renaming not allowed! WARNING: the path %r for the share %r matches a blacklisted path. The whitelist can be extended via the URC variables listener/shares/whitelist/." % (newPath, newPath, share_name)


              175
              
			return "%r as destination for renaming not allowed! WARNING: the path %r for the share %r matches a blacklisted path. The whitelist can be extended via the URC variables listener/shares/whitelist/. After changing the variables univention-directory-listener needs to be restartet." % (newPath, newPath, share_name)

            

        

          176
          
		if is_blacklisted(oldPath, cr):

          176
          
		if is_blacklisted(oldPath, cr):

        

          
            

              177
              
			return "%r as source for renaming not allowed! WARNING: the path %r for the share %r matches a blacklisted path. The whitelist can be extended via the URC variables listener/shares/whitelist/." % (oldPath, newPath, share_name)


              177
              
			return "%r as source for renaming not allowed! WARNING: the path %r for the share %r matches a blacklisted path. The whitelist can be extended via the URC variables listener/shares/whitelist/. After changing the variables univention-directory-listener needs to be restartet." % (oldPath, newPath, share_name)

            

        

          178
          

          178
          

        

        

          179
          
		# check mount point

          179
          
		# check mount point

        

        

          180
          
		for i in [oldPath, newPath]:

          180
          
		for i in [oldPath, newPath]:

        






  

  Return to bug 44054