aboutsummaryrefslogtreecommitdiff
path: root/ikiwiki-mass-rebuild
Commit message (Collapse)AuthorAge
* Exclude working directory from library path (CVE-2016-1238)Simon McVittie2016-07-28
| | | | | | | | | | | | | | | | | | | | | Current Perl versions put '.' at the end of the library search path @INC, although this will be fixed in a future Perl release. This means that when software loads an optionally-present module, it will be looked for in the current working directory before giving up. An attacker could use this to execute arbitrary Perl code from ikiwiki's current working directory. Removing '.' from the library search path in Perl is the correct fix for this vulnerability, but is not trivial to do due to backwards-compatibility concerns. Mitigate this (even if ikiwiki is run with a vulnerable Perl version) by explicitly removing '.' from the search path, and instead looking for ikiwiki's own modules relative to the absolute path of the executable when run from the source directory. In tests that specifically want to use the current working directory, use "-I".getcwd instead of "-I." so we use its absolute path, which is immune to the removal of ".".
* Standardize on --long-option instead of -long-optionSimon McVittie2015-03-01
| | | | | | | | | | [[forum/refresh_and_setup]] indicates some confusion between --setup and -setup. Both work, but it's clearer if we stick to one in documentation and code. A 2012 commit to [[plugins/theme]] claims that "-setup" is required and "--setup" won't work, but I cannot find any evidence in ikiwiki's source code that this has ever been the case.
* don't exit sub via nextJoey Hess2011-08-21
|
* ikiwiki-mass-rebuild: Fix tty hijacking vulnerability by using su. (Once ↵Joey Hess2011-06-08
| | | | su's related bug #628843 is fixed.) Thanks, Ludwig Nussel. (CVE-2011-1408)
* fix two build bugsJoey Hess2008-06-13
| | | | | | * ikiwiki-mass-rebuild: Make group list comparison more robust. * search: Work around xapian bug #486138 by only stemming locales in a whitelist.
* sort list for $) so comparison worksJoey Hess2008-06-03
|
* ikiwiki-mass-rebuild: Don't trust $! when setting $)Joey Hess2008-05-31
| | | | | A better fix, just check that what $) returns is what it was asked to set, and ignore $! entirely.
* ikiwiki-mass-rebuild: under $! before setting $) to avoid strange errno issueJoey Hess2008-05-31
| | | | | | | | | | This fixes a problem sgran saw on alioth. Apparently nss-db sets errno to ENOENT as a side effect trying to read an optional file, but succeeds anyway. Then, somehow, errno remains set across the library calls made by $). So unset it first as a workaround; there's probably a nss-db, libc, and/or perl bug underneath.
* display if group setting failsJoey Hess2007-12-07
|
* * Add wrappergroup config option, which can be used to cause wrappersJoey Hess2007-11-14
| | | | | | | to be created owned by some group other than the default. Useful then there's a shared repository with access controlled by a group, to let ikiwiki run setgid to that group. * ikiwiki-mass-rebuild: Run build with the user in all their groups.
* * ikiwiki-mass-rebuild: Patch from HenrikBrixAndersen to fix orderJoey Hess2007-10-25
| | | | * ikiwiki-mass-rebuild: Don't clear PATH from the environment.
* * ikiwiki-mass-rebuild: Patch from HenrikBrixAndersen to fix orderJoey Hess2007-10-25
| | | | of permissions dropping code to work on FreeBSD.
* * Allow /etc/ikiwiki/wikilist to list just the names of users, if so then joey2006-11-28
| | | | ~user/.ikiwiki/wikilist will be read.
* * Fix ikiwiki-mass-rebuild to work in the way the postinst uses it.joey2006-08-19
|
* * Add -refresh option to ikiwiki-mass-rebuild and use that on upgrades thatjoey2006-05-27
| | | | do not need a full rebuild, in order to update any basewiki pages.
* * Add ikiwiki-mass-rebuild script, ripped out of the postinst.joey2006-05-05
* Add some new config items to the estseek.conf template, which are needed by hyperestraier 1.2.3.