ebc90bfc98
Directories are created prior to merge during clone, and prior to any Git command run. This directly addresses CVE-2017-11353. When cloning a repo which includes data in a .ssh or .gnupg directory, if those directories do not exist at the time of cloning, yadm will create the directories with mask 0700 prior to merging the fetched data into the work-tree. When running a Git command and .ssh or .gnupg directories do not exist, create those directories with mask 0700 prior to running the Git command. However, do not create those directories if yadm.auto-private-dirs is false. |
||
---|---|---|
.. | ||
000_unit_syntax.bats | ||
001_unit_paths.bats | ||
002_unit_gpg_program.bats | ||
003_unit_ls_program.bats | ||
004_unit_git_program.bats | ||
005_unit_bootstrap_available.bats | ||
006_unit_set_operating_system.bats | ||
007_unit_query_distro.bats | ||
100_accept_version.bats | ||
101_accept_help.bats | ||
102_accept_clean.bats | ||
103_accept_git.bats | ||
104_accept_init.bats | ||
105_accept_clone.bats | ||
106_accept_config.bats | ||
107_accept_list.bats | ||
108_accept_alt.bats | ||
109_accept_encryption.bats | ||
110_accept_perms.bats | ||
111_accept_wildcard_alt.bats | ||
112_accept_bootstrap.bats | ||
113_accept_jinja_alt.bats | ||
114_accept_enter.bats | ||
115_accept_introspect.bats | ||
116_accept_cygwin_copy.bats | ||
117_accept_hooks.bats | ||
118_accept_assert_private_dirs.bats | ||
common.bash | ||
ownertrust.txt | ||
test_key |