Prevent potential directory traversal with malicious EC2 image tarballs, by making sure the tarfile is safe before unpacking it. Fixes bug 894755 Prevent potential directory traversal with malicious file names in EC2 image manifests. Fixes bug 885167 Change-Id: If6109047307bd6e654ee9d1254f0d7f31cf741c1
		
			
				
	
	
		
			45 lines
		
	
	
		
			1.5 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			45 lines
		
	
	
		
			1.5 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
include HACKING LICENSE run_tests.py run_tests.sh
 | 
						|
include README exercise_rsapi.py
 | 
						|
include MANIFEST.in pylintrc Authors
 | 
						|
graft nova/CA
 | 
						|
graft doc
 | 
						|
graft smoketests
 | 
						|
graft tools
 | 
						|
graft etc
 | 
						|
graft contrib
 | 
						|
graft po
 | 
						|
graft plugins
 | 
						|
graft nova/api/openstack/schemas
 | 
						|
include nova/auth/*.schema
 | 
						|
include nova/auth/novarc.template
 | 
						|
include nova/auth/opendj.sh
 | 
						|
include nova/auth/slap.sh
 | 
						|
include nova/cloudpipe/bootscript.sh
 | 
						|
include nova/cloudpipe/client.ovpn.template
 | 
						|
include nova/cloudpipe/bootscript.template
 | 
						|
include nova/compute/fakevirtinstance.xml
 | 
						|
include nova/compute/interfaces.template
 | 
						|
include nova/console/xvp.conf.template
 | 
						|
include nova/db/sqlalchemy/migrate_repo/migrate.cfg
 | 
						|
include nova/db/sqlalchemy/migrate_repo/README
 | 
						|
include nova/db/sqlalchemy/migrate_repo/versions/*.sql
 | 
						|
include nova/virt/interfaces.template
 | 
						|
include nova/virt/libvirt*.xml.template
 | 
						|
include nova/virt/cpuinfo.xml.template
 | 
						|
include nova/tests/CA/
 | 
						|
include nova/tests/CA/cacert.pem
 | 
						|
include nova/tests/CA/private/
 | 
						|
include nova/tests/CA/private/cakey.pem
 | 
						|
include nova/tests/bundle/
 | 
						|
include nova/tests/bundle/1mb.manifest.xml
 | 
						|
include nova/tests/bundle/1mb.no_kernel_or_ramdisk.manifest.xml
 | 
						|
include nova/tests/bundle/1mb.part.0
 | 
						|
include nova/tests/bundle/1mb.part.1
 | 
						|
include nova/tests/api/ec2/public_key/*
 | 
						|
include nova/tests/db/nova.austin.sqlite
 | 
						|
include nova/tests/image/*.tar.gz
 | 
						|
include plugins/xenapi/README
 | 
						|
include plugins/xenapi/etc/xapi.d/plugins/objectstore
 | 
						|
include plugins/xenapi/etc/xapi.d/plugins/pluginlib_nova.py
 | 
						|
global-exclude *.pyc
 |