mirror of
https://git.freebsd.org/ports.git
synced 2025-07-18 17:59:20 -04:00
Install a "refuse" file to protect the mirror's scripts and
configuration files from a malicious or compromised master site.
This commit is contained in:
parent
11465fa9cd
commit
a7dc76b0aa
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=24712
3 changed files with 10 additions and 1 deletions
|
@ -22,6 +22,7 @@ NO_PACKAGE= too interactive
|
|||
SCRIPTS_ENV= USA_RESIDENT=${USA_RESIDENT}
|
||||
|
||||
base=${PREFIX}/etc/cvsup
|
||||
distrib=${base}/sup.client/distrib
|
||||
rc=${PREFIX}/etc/rc.d
|
||||
|
||||
do-extract:
|
||||
|
@ -29,13 +30,14 @@ do-extract:
|
|||
|
||||
do-install:
|
||||
@${ECHO_MSG} "Installing files"
|
||||
@test -d ${base} || ${MKDIR} ${base}
|
||||
@test -d ${distrib} || ${MKDIR} ${distrib}
|
||||
@test -d ${rc} || ${MKDIR} ${rc}
|
||||
@${INSTALL_DATA} ${WRKSRC}/config.sh ${base}
|
||||
@${INSTALL_SCRIPT} ${FILESDIR}/update.sh ${base}
|
||||
@${INSTALL_DATA} ${FILESDIR}/supfile ${base}
|
||||
@${INSTALL_DATA} ${FILESDIR}/supfile.crypto ${base}
|
||||
@${INSTALL_DATA} ${FILESDIR}/supfile.non-crypto ${base}
|
||||
@${INSTALL_DATA} ${FILESDIR}/refuse.self ${distrib}
|
||||
@${INSTALL_SCRIPT} ${FILESDIR}/cvsupd.sh ${rc}
|
||||
@${CP} /dev/null ${base}/.start_server
|
||||
|
||||
|
|
6
net/cvsup-mirror/files/refuse.self
Normal file
6
net/cvsup-mirror/files/refuse.self
Normal file
|
@ -0,0 +1,6 @@
|
|||
*.sh
|
||||
cvsupd.access
|
||||
cvsupd.passwd
|
||||
prefixes
|
||||
sup.client
|
||||
supfile*
|
|
@ -1,4 +1,5 @@
|
|||
etc/cvsup/config.sh
|
||||
etc/cvsup/sup.client/distrib/refuse.self
|
||||
etc/cvsup/supfile
|
||||
etc/cvsup/supfile.crypto
|
||||
etc/cvsup/supfile.non-crypto
|
||||
|
|
Loading…
Add table
Reference in a new issue