CVS: tmda-cgi ChangeLog,1.56,1.57 Session.py,1.35,1.36
Gre7g Luterman <[email protected]>
| Newsgroups | gmane.mail.spam.tmda.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/tmda/tmda-cgi In directory sc8-pr-cvs1:/tmp/cvs-serv20013 Modified Files: ChangeLog Session.py Log Message: Modified install skeleton so it defines HOSTNAME. Changed umask before and after writing session file in /tmp so that permissions are 0600. Index: ChangeLog =================================================================== RCS file: /cvsroot/tmda/tmda-cgi/ChangeLog,v retrieving revision 1.56 retrieving revision 1.57 diff -u -r1.56 -r1.57 --- ChangeLog 18 Aug 2003 23:47:53 -0000 1.56 +++ ChangeLog 21 Aug 2003 03:37:28 -0000 1.57 @@ -1,3 +1,10 @@ +2003-08-20 Gre7g Luterman <[email protected]> + + * Modified install skeleton so it defines HOSTNAME. + + * Changed umask before and after writing session file in /tmp so that + permissions are 0600. + 2003-08-18 Gre7g Luterman <[email protected]> * Applied a patch to configure for Bernard Johnson which I believe is Index: Session.py =================================================================== RCS file: /cvsroot/tmda/tmda-cgi/Session.py,v retrieving revision 1.35 retrieving revision 1.36 diff -u -r1.35 -r1.36 --- Session.py 14 Jun 2003 14:52:10 -0000 1.35 +++ Session.py 21 Aug 2003 03:37:28 -0000 1.36 @@ -178,6 +178,7 @@ self.__suid__("web") Filename = os.environ["TMDA_SESSION_PREFIX"] + self.SID Data = self.Vars + UMask = os.umask(0177) # Save data try: @@ -192,6 +193,8 @@ """Either grant the session user sufficient privileges to write the session file,<br>or recompile the CGI and specify a CGI_USER with more rights.""") + if not self.RealUser: + os.umask(UMask) os.chdir(CWD) def LoadSysDefaults(self): @@ -214,6 +217,7 @@ self.NoOverride[Option] = self.ThemeVars.get("NoOverride", Option, 1) # Trim out domain name from user name + os.environ["LOGIN"] = self.Vars["User"] Match = re.search(self[("NoOverride", "UserSplit")], self.Vars["User"]) if Match: os.environ["USER"] = Match.group(1) _______________________________________ tmda-cvs mailing list http://tmda.net/lists/listinfo/tmda-cvs