chiark / gitweb /
~ianmdlvl / secnet.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 433b0ae) | patch
make-secnet-sites: Do not permit "include" in simple sites files
authorIan Jackson <ijackson@chiark.greenend.org.uk>
Wed, 11 Jul 2012 00:00:17 +0000 (01:00 +0100)
committerIan Jackson <ijackson@chiark.greenend.org.uk>
Thu, 12 Jul 2012 18:54:26 +0000 (19:54 +0100)
commit21fd3a92a61d31ce848177c0049cb6eb39963161
tree6dfc7d10bb25119562cab906f367e7174ce3b514tree | snapshot
parent433b0ae83105d91d14c321a9e1369338fe7f7f7dcommit | diff
make-secnet-sites: Do not permit "include" in simple sites files

Restrict the "include" directive to the "header" of -u (groupfile
update) mode.  Callers who are simply using make-secnet-sites to
transform a (possibly untrusted) sites file into a (to be trusted)
sites.conf file should not have to worry about includes.

"include" directives are already forbidden in group files.

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
make-secnet-sites diff | blob | history
secnet (vpn system) - master public repo