[game-data-packager] 12/13: testsuite: avoid potential symlink attacks in /tmp

Simon McVittie smcv at debian.org
Sat Jan 17 01:20:21 UTC 2015


This is an automated email from the git hooks/post-receive script.

smcv pushed a commit to branch master
in repository game-data-packager.

commit 7404252143284c2e49cafd83540541ac4734d3b3
Author: Simon McVittie <smcv at debian.org>
Date:   Sat Jan 17 01:10:59 2015 +0000

    testsuite: avoid potential symlink attacks in /tmp
---
 Makefile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index d2b5b80..2d7a770 100644
--- a/Makefile
+++ b/Makefile
@@ -94,9 +94,11 @@ check:
 	pyflakes3 lib/game_data_packager/*.py lib/game_data_packager/*/*.py || :
 
 testsuite:
+	install -d tmp/
 	for game in $(TEST_SUITE); do \
 	        GDP_MIRROR=$(GDP_MIRROR) GDP_UNINSTALLED=1 PYTHONPATH=lib \
-		python3 -m game_data_packager -d /tmp --no-search --no-compress $$game || exit $$?; \
+		python3 -m game_data_packager -d ./tmp --no-search --no-compress $$game || exit $$?; \
 	done
+	rm -fr tmp/
 
 .PHONY: default clean check testsuite

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/game-data-packager.git



More information about the Pkg-games-commits mailing list