Am 30.09.2013 22:01, schrieb Glenn Ramsey: > Security-Alert: try to store file outside of dist-directory. Aborting. > '../Plugins/Plugin_CgProgramManager.dylib' > > This is using the develop branch, up to date (15983b2...). It was > working previously with 2.0.
This is intended to avoid overwriting files outside the dist-directory. If we would not do this, one could overwrite data anywhere on your filesystem. This kind of attack is call "directory traversal". -- Schönen Gruß Hartmut Goebel Dipl.-Informatiker (univ), CISSP, CSSLP Information Security Management, Security Governance, Secure Software Development Goebel Consult, Landshut http://www.goebel-consult.de Monatliche Kolumne: http://www.cissp-gefluester.de/2011-08-horrorszenario-bring-your-own-device Blog: http://www.goebel-consult.de/blog/pdf-kommentare-unter-linux-nix-is Goebel Consult ist Mitglied bei http://www.7-it.de/ -- You received this message because you are subscribed to the Google Groups "PyInstaller" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/pyinstaller. For more options, visit https://groups.google.com/groups/opt_out.
