Commit Graph

883 Commits

Author SHA1 Message Date
Marcin Szewczyk
c4f4ac3e01 fix: direct mode allows injecting unauthorized filesystem operations 2015-10-27 15:18:26 +01:00
Axel Kittenberger
cce7db5ebd preparing version 2.1.6 2015-10-15 08:29:47 +02:00
Axel Kittenberger
4bdde8a672 updating ChangeLog 2015-10-15 08:16:28 +02:00
Axel Kittenberger
8fb9fc4bbb Merge branch 'master' of github.com:axkibe/lsyncd 2015-10-15 08:15:16 +02:00
Axel Kittenberger
bddc9a7fde updating ChangeLog 2015-10-15 08:15:06 +02:00
Axel Kittenberger
ea31ea92a7 Merge pull request #283 from rolandwalker/doc_disclaimer
Clarify the disclaimer.
2015-10-14 14:49:17 +02:00
Axel Kittenberger
5f74865f68 added inplace option for rsync 2015-10-14 14:39:14 +02:00
Axel Kittenberger
a18ba20365 Merge pull request #307 from fabled/master
Fix lpostcmd example
2015-10-14 14:38:38 +02:00
Axel Kittenberger
b301838eb3 o 2015-10-14 14:30:02 +02:00
Axel Kittenberger
2493476f64 fixing tests for lua 5.2 os.execute call semantics 2015-10-14 14:23:37 +02:00
Axel Kittenberger
1f95925304 compiles on OSX better 2015-10-14 12:57:49 +02:00
Timo Teräs
abbf307b97 Add checkgauge in lpostcmd 2015-01-30 09:35:38 +02:00
Timo Teräs
5b76dc1cb6 Fix lpostcmd prepare to work with recent changes 2015-01-30 09:12:25 +02:00
Timo Teräs
19b08adf35 Fix lpostcmd to use isPostcmd via rawget as intended 2015-01-30 09:09:45 +02:00
Axel Kittenberger
e9ffda07f0 Merge pull request #298 from creshal/master
Properly sanitize mv parameters (CVE-2014-8990)
2014-11-26 11:39:46 +01:00
Ángel González
e6016b3748 Properly sanitize mv parameters (CVE-2014-8990)
When using -rsyncssh option, some filenames
could -in addition of not syncing correctly-
crash the service and execute arbitrary commands
under the credentials of the remote user.

These issues have been assigned CVE-2014-8990

This commit fixes the incomplete and lua5.2-incompatible
sanitization performed by 18f02ad0

Signed-off-by: Sven Schwedas <sven.schwedas@tao.at>
2014-11-26 09:01:25 +01:00
Sven Schwedas
18f02ad013 Sanitize mv arguments:
1. Fixes crashes on file names containing `, $ or "
2. Also prevents shell execution of ``, $() … in file names, which can be
   used to gain remote shell access as lsyncd's (target) user.
2014-10-29 13:32:20 +01:00
Roland Walker
aea57a5a11 Clarify the disclaimer.
The previous phrasing might be misread as claiming responsibility
rather than disclaiming it.
2014-07-08 10:43:52 -04:00
Axel Kittenberger
4da2257758 adding install targets and reenabling the manpage stuff 2014-04-29 16:38:25 +02:00
Axel Kittenberger
f199fd1866 this can now also go 2014-04-29 16:19:18 +02:00
Axel Kittenberger
8572a6dacc simply adding the compiled manpage to the git repository. that is giving up the idea not to put anything generated into the source repository. it is going to be easier that way. 2014-04-29 16:18:06 +02:00
Axel Kittenberger
23dfeb6a05 ignoring stuff for intree builds 2014-04-29 16:13:12 +02:00
Axel Kittenberger
b6228f442d Replacing autotools with CMake 2014-04-29 16:11:27 +02:00
Axel Kittenberger
0a1cab6609 updating changelog 2014-04-24 13:33:07 +02:00
Axel Kittenberger
6d69134971 Merge pull request #238 from st63jun/fix-logging-msg
Fix logging message
2014-04-24 13:17:21 +02:00
Axel Kittenberger
110a525392 Merge pull request #255 from plouj/patch-1
Typo in print format.
2014-04-24 12:47:25 +02:00
Axel Kittenberger
f8fea06944 Merge pull request #253 from exKAZUu/master 2014-04-24 12:45:15 +02:00
Axel Kittenberger
85e95ef150 cosmetics 2014-02-28 10:15:48 +01:00
Michael Ploujnikov
786f37d22d Typo in print format.
This causes a segfault when addwatch fails due to a disappeared
directory. Eg: often caused by a race condition with a short lived
directory created by Firefox' safebrowsing subsystem:
~/.cache/mozilla/firefox/pr0f1l3.default/safebrowsing-to_delete/
2014-01-08 23:21:18 -05:00
Kazunori SAKAMOTO
7addc7060b Add missed comma. 2014-01-03 17:11:48 +09:00
Axel Kittenberger
178f315907 Merge pull request #246 from andrewfenn/patch-1
Fix for older kernels to make sure O_CLOEXEC is defined
2013-11-11 01:24:53 -08:00
Andrew Fenn
b2383227cd Fix for older kernels to make sure O_CLOEXEC is defined
This patch fixes an issue where I was getting build errors that O_CLOEXEC was undefined on an older 2.6.32 kernel. Even though the flag is supported in this kernel it was not getting defined.
2013-10-30 13:03:24 +07:00
Jun SAITO
1bfd98d64d Fix logging message 2013-09-30 23:05:59 +09:00
Axel Kittenberger
c23e9841ee a2x instead of 2013-09-15 18:03:27 +02:00
Axel Kittenberger
b6f4c6f990 Merge pull request #231 from rhunter/patch-1
Link to official BindFS homepage in README
2013-08-06 21:27:56 -07:00
Rob Hunter
54e721e94b Update README link to latest official home 2013-08-07 13:34:52 +10:00
Axel Kittenberger
25d2405906 lock pidfile, remove pidfile on INT or TERM 2013-07-30 12:20:23 +02:00
Axel Kittenberger
6f4613c53a adding ssh.identityFile and ssh.options options 2013-07-30 11:16:29 +02:00
Axel Kittenberger
1dacb68745 Merge pull request #221 from dreiss/config
Fixes for parsing excludes file
2013-07-07 23:15:33 -07:00
David Reiss
d772fcba0f Ignore blank lines and rsync comments in excludes file 2013-07-05 10:46:27 -07:00
David Reiss
716b88909a Escape + in pattern for extra safety
The old version worked, but it seems like an accident that a "+" after a
"*" is treated as a literal "+" and not a repetition.
2013-07-05 10:45:56 -07:00
David Reiss
502e2e0eed Don't treat exclude lines with embedded "+" characters as inclusions
Previously, this code prevented any file name with a "+" character from
being excluded.
2013-07-05 10:27:18 -07:00
Axel Kittenberger
e880c607be wrong month :/ 2013-06-07 14:44:14 +02:00
Axel Kittenberger
d0c9a60213 changing delay from command line to a number 2013-06-07 14:24:02 +02:00
Axel Kittenberger
c785f0a2ad Changelog 2013-06-07 14:10:39 +02:00
Axel Kittenberger
1c299c14dd checking delay to a number > 0 2013-06-07 14:09:57 +02:00
Axel Kittenberger
3aa8ed1182 * fixing ssh port overwriting the last rsync option
* preparing 2.1.5
2013-06-07 13:40:54 +02:00
Axel Kittenberger
7fe13abab8 Merge branch 'master' of https://github.com/axkibe/lsyncd 2013-06-07 13:26:03 +02:00
Axel Kittenberger
72fa0e8865 Merge branch 'master' of github.com:axkibe/lsyncd 2013-06-07 13:23:55 +02:00
Axel Kittenberger
6290bd6ea7 + fixing 0 characters in -log Exec message for pipes 2013-06-07 11:12:24 +02:00