| 1 |
Author: zmedico |
| 2 |
Date: 2008-10-12 21:01:12 +0000 (Sun, 12 Oct 2008) |
| 3 |
New Revision: 11684 |
| 4 |
|
| 5 |
Modified: |
| 6 |
main/trunk/bin/ebuild.sh |
| 7 |
Log: |
| 8 |
Add an explicit note about bug #239560 in the relevant code. |
| 9 |
|
| 10 |
|
| 11 |
Modified: main/trunk/bin/ebuild.sh |
| 12 |
=================================================================== |
| 13 |
--- main/trunk/bin/ebuild.sh 2008-10-12 20:57:00 UTC (rev 11683) |
| 14 |
+++ main/trunk/bin/ebuild.sh 2008-10-12 21:01:12 UTC (rev 11684) |
| 15 |
@@ -272,7 +272,9 @@ |
| 16 |
export EBUILD_DEATH_HOOKS="${EBUILD_DEATH_HOOKS} $*" |
| 17 |
} |
| 18 |
|
| 19 |
-# Ensure that $PWD is sane whenever possible. |
| 20 |
+# Ensure that $PWD is sane whenever possible, to protect against |
| 21 |
+# exploitation of insecure search path for python -c in ebuilds. |
| 22 |
+# See bug #239560. |
| 23 |
if ! hasq "$EBUILD_PHASE" clean depend help ; then |
| 24 |
cd "$PORTAGE_BUILDDIR" || \ |
| 25 |
die "PORTAGE_BUILDDIR does not exist: '$PORTAGE_BUILDDIR'" |
Archives