diff options
| author | Thomas Tuegel <ttuegel@gmail.com> | 2014-02-10 08:15:24 -0600 |
|---|---|---|
| committer | Thomas Tuegel <ttuegel@gmail.com> | 2014-02-10 08:16:22 -0600 |
| commit | 3dc6168b317fb3923f2ae073575a8582d01d3ba9 (patch) | |
| tree | c6847b315c8d6dac9d6706ff56055f09f6489bf6 /pkgs/development/python-modules/GitPython/hardcode-git-path.patch | |
| parent | 6a8cc9ab11765d101023076f022e8682d40ad7f0 (diff) | |
Properly escape passwords sent to chpasswd
The mutableUsers feature uses `chpasswd` to set users passwords.
Passwords and their hashes were being piped into the program using
double quotes ("") to escape. This causes any `$` characters to be
expanded as shell variables. This is a serious problem because all the
password hash methods besides DES use multiple `$` in the hashes. Single
quotes ('') should be used instead to prevent shell variable expansion.
Diffstat (limited to 'pkgs/development/python-modules/GitPython/hardcode-git-path.patch')
0 files changed, 0 insertions, 0 deletions