[Rdiff-backup-bugs] [bug #16897] Security Violation on first increment while using restrict-update-only

[anonymous]

URL:
  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=16897>

                 Summary: Security Violation on first increment while using
restrict-update-only
                 Project: rdiff-backup
            Submitted by: None
            Submitted on: Tuesday 06/20/2006 at 21:37 UTC
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open

    _______________________________________________________

Details:

I created some remote backups and then set up a "secure" enviroment with the
help of --restrict and --restrict-update-only. In the directories where the
backup was created and then incremented (before I setup this flags)
everything works as it should, but (!!) in the directories where there hasn't
been an increment (till now) I now (with the restrictions set up) get the
following error:

Traceback (most recent call last):
  File "/usr/bin/rdiff-backup", line 23, in ?
    rdiff_backup.Main.error_check_Main(sys.argv[1:])
  File "/usr/lib/python2.3/site-packages/rdiff_backup/Main.py", line 295, in
error_check_Main
    try: Main(arglist)
  File "/usr/lib/python2.3/site-packages/rdiff_backup/Main.py", line 315, in
Main
    take_action(rps)
  File "/usr/lib/python2.3/site-packages/rdiff_backup/Main.py", line 271, in
take_action
    elif action == "backup": Backup(rps[0], rps[1])
  File "/usr/lib/python2.3/site-packages/rdiff_backup/Main.py", line 328, in
Backup
    backup_final_init(rpout)
  File "/usr/lib/python2.3/site-packages/rdiff_backup/Main.py", line 432, in
backup_final_init
    if not inc_base.lstat(): inc_base.mkdir()
  File "/usr/lib/python2.3/site-packages/rdiff_backup/rpath.py", line 863, in
mkdir
    self.conn.os.mkdir(self.path)
  File "/usr/lib/python2.3/site-packages/rdiff_backup/connection.py", line
448, in __call__
    return apply(self.connection.reval, (self.name,) + args)
  File "/usr/lib/python2.3/site-packages/rdiff_backup/connection.py", line
370, in reval
    if isinstance(result, Exception): raise result
rdiff_backup.Security.Violation:
Warning Security Violation!
Bad request for function: os.mkdir
with arguments: ['/target/backup/dir/rdiff-backup-data/increments']

The solution would be to allow os.mkdir to create directories if they are in
the rdiff-backup-data subdirectory inside of the restricted path! Or to
create ALL subdirectories inside rdiff-backup-data that could be needed at
some point in the future when the program is executed at the first backup!






    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=16897>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/