Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package vagrant-sshfs for openSUSE:Factory checked in at 2021-10-15 23:04:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vagrant-sshfs (Old) and /work/SRC/openSUSE:Factory/.vagrant-sshfs.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vagrant-sshfs" Fri Oct 15 23:04:28 2021 rev:15 rq:925476 version:1.3.6 Changes: -------- --- /work/SRC/openSUSE:Factory/vagrant-sshfs/vagrant-sshfs.changes 2021-08-12 10:46:43.578130474 +0200 +++ /work/SRC/openSUSE:Factory/.vagrant-sshfs.new.1890/vagrant-sshfs.changes 2021-10-15 23:05:01.866143127 +0200 @@ -1,0 +2,6 @@ +Fri Oct 8 13:44:36 UTC 2021 - Matthias Gerstner <[email protected]> + +- testsuite.sh: avoid reuse of existing directory or symlink from other users + to prevent potential security issues (bsc#1182861) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ testsuite.sh ++++++ --- /var/tmp/diff_new_pack.tvALmS/_old 2021-10-15 23:05:02.298143435 +0200 +++ /var/tmp/diff_new_pack.tvALmS/_new 2021-10-15 23:05:02.302143438 +0200 @@ -17,7 +17,14 @@ trap cleanup EXIT -mkdir -p /tmp/reverse_mount_etc +mkdir /tmp/reverse_mount_etc 2>/dev/null +if [ $? -ne 0 ]; then + OWNER=$(stat -c '%U' /tmp/reverse_mount_etc) + if [ "$OWNER" != "$USER" ]; then + echo "/tmp/reverse_mount_etc already exists and is owned by a different user. refusing to continue" 1>&2 + exit 1 + fi +fi mkdir other_machine && pushd other_machine vagrant init "opensuse/Tumbleweed.$(uname -m)"
