summaryrefslogtreecommitdiff
path: root/net/cvsup-mirror
diff options
context:
space:
mode:
authorJohn Polstra <jdp@FreeBSD.org>2000-01-14 04:39:57 +0000
committerJohn Polstra <jdp@FreeBSD.org>2000-01-14 04:39:57 +0000
commita7dc76b0aaff4eb133cd4839c4b193d37d12187f (patch)
tree7f80173d5a38ed16436dd6c7713a76511f282588 /net/cvsup-mirror
parent- Upgrade to 5.2.3. (diff)
Install a "refuse" file to protect the mirror's scripts and
configuration files from a malicious or compromised master site.
Notes
Notes: svn path=/head/; revision=24712
Diffstat (limited to 'net/cvsup-mirror')
-rw-r--r--net/cvsup-mirror/Makefile4
-rw-r--r--net/cvsup-mirror/files/refuse.self6
-rw-r--r--net/cvsup-mirror/pkg-plist1
3 files changed, 10 insertions, 1 deletions
diff --git a/net/cvsup-mirror/Makefile b/net/cvsup-mirror/Makefile
index a10bc83f343b..9c58c78dbeda 100644
--- a/net/cvsup-mirror/Makefile
+++ b/net/cvsup-mirror/Makefile
@@ -22,6 +22,7 @@ NO_PACKAGE= too interactive
SCRIPTS_ENV= USA_RESIDENT=${USA_RESIDENT}
base=${PREFIX}/etc/cvsup
+distrib=${base}/sup.client/distrib
rc=${PREFIX}/etc/rc.d
do-extract:
@@ -29,13 +30,14 @@ do-extract:
do-install:
@${ECHO_MSG} "Installing files"
- @test -d ${base} || ${MKDIR} ${base}
+ @test -d ${distrib} || ${MKDIR} ${distrib}
@test -d ${rc} || ${MKDIR} ${rc}
@${INSTALL_DATA} ${WRKSRC}/config.sh ${base}
@${INSTALL_SCRIPT} ${FILESDIR}/update.sh ${base}
@${INSTALL_DATA} ${FILESDIR}/supfile ${base}
@${INSTALL_DATA} ${FILESDIR}/supfile.crypto ${base}
@${INSTALL_DATA} ${FILESDIR}/supfile.non-crypto ${base}
+ @${INSTALL_DATA} ${FILESDIR}/refuse.self ${distrib}
@${INSTALL_SCRIPT} ${FILESDIR}/cvsupd.sh ${rc}
@${CP} /dev/null ${base}/.start_server
diff --git a/net/cvsup-mirror/files/refuse.self b/net/cvsup-mirror/files/refuse.self
new file mode 100644
index 000000000000..a69dfec5c2a8
--- /dev/null
+++ b/net/cvsup-mirror/files/refuse.self
@@ -0,0 +1,6 @@
+*.sh
+cvsupd.access
+cvsupd.passwd
+prefixes
+sup.client
+supfile*
diff --git a/net/cvsup-mirror/pkg-plist b/net/cvsup-mirror/pkg-plist
index cd07ad92cf0f..d7f66c09b269 100644
--- a/net/cvsup-mirror/pkg-plist
+++ b/net/cvsup-mirror/pkg-plist
@@ -1,4 +1,5 @@
etc/cvsup/config.sh
+etc/cvsup/sup.client/distrib/refuse.self
etc/cvsup/supfile
etc/cvsup/supfile.crypto
etc/cvsup/supfile.non-crypto