~ubuntu-branches/ubuntu/lucid/munin/lucid-proposed

« back to all changes in this revision

Viewing changes to debian/munin-node.postinst

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-10-17 08:26:39 UTC
  • Revision ID: package-import@ubuntu.com-20121017082639-romotbyhmcjoz0sl
Tags: 1.4.4-1ubuntu1.2
* SECURITY UPDATE: symlink vulnerability in qmailscan plugin
  - debian/patches/CVE-2012-2103.patch: remove the use of tempfiles in
    plugins/node.d/qmailscan.in.
  - CVE-2012-2103
* SECURITY UPDATE: privilege escalation via root running plugins
  - debian/patches/CVE-2012-3512.patch: run each plugin in their own
    state directory in Makefile, Makefile.config,
    node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
    plugins/node.d/*.in,plugins/node.d.linux/*.in.
  - debian/patches/CVE-2012-3512-regression.patch: Don't rely on
    MUNIN_PLUGSTATE being in the environment as these scripts also get
    run by a cron job in plugins/node.d.linux/apt_all.in,
    plugins/node.d.linux/apt.in.
  - CVE-2012-3512
* debian/Makefile.config: added new plugin state directory location.
* debian/munin-node.{postinst,postrm}: Remove old plugin state directory
  override, also remove new plugin state directory.

Show diffs side-by-side

added added

removed removed

Lines of Context:
20
20
                dpkg-statoverride --update --add munin adm 0750 /var/log/munin
21
21
        dpkg-statoverride --list /var/lib/munin >/dev/null || \
22
22
                dpkg-statoverride --update --add munin munin 0755 /var/lib/munin
23
 
        dpkg-statoverride --list /var/lib/munin/plugin-state >/dev/null || \
24
 
                dpkg-statoverride --update --add munin munin 0775 /var/lib/munin/plugin-state
 
23
        if dpkg-statoverride --list /var/lib/munin/plugin-state >/dev/null; then
 
24
                dpkg-statoverride --remove /var/lib/munin/plugin-state
 
25
        fi
25
26
        dpkg-statoverride --list /etc/munin/plugin-conf.d >/dev/null || \
26
27
                dpkg-statoverride --update --add root munin 0750 /etc/munin/plugin-conf.d
27
28
}