rpms/BackupPC/F-11 BackupPC.spec,1.10,1.11

[Johan Cwiklinski]

Author: trasher

Update of /cvs/extras/rpms/BackupPC/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv14938

Modified Files:
	BackupPC.spec 
Log Message:
Remove ClientNameAlias directive from CgiUserConfigEdit list to avoid security hole (bug #518412)


Index: BackupPC.spec
===================================================================
RCS file: /cvs/extras/rpms/BackupPC/F-11/BackupPC.spec,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -p -r1.10 -r1.11
--- BackupPC.spec	18 Sep 2009 21:17:03 -0000	1.10
+++ BackupPC.spec	25 Sep 2009 15:16:34 -0000	1.11
@@ -6,7 +6,7 @@
 
 Name:           BackupPC
 Version:        3.1.0
-Release:        6%{?dist}
+Release:        7%{?dist}
 Summary:        High-performance backup system
 
 Group:          Applications/System
@@ -150,6 +150,7 @@ sed -i s,$LOGNAME,backuppc,g init.d/linu
 
 sed -i 's/^\$Conf{XferMethod}\ =.*/$Conf{XferMethod} = "rsync";/' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
 sed -i 's|^\$Conf{CgiURL}\ =.*|$Conf{CgiURL} = "http://localhost/BackupPC";|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
+sed -i 's|ClientNameAlias           => 1,|ClientNameAlias           => 0,|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
 
 %if %{useselinux}
      # SElinux 
@@ -226,6 +227,9 @@ fi
 %endif
 
 %changelog
+* Fri Sep 25 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-7
+- Fix security bug (bug #518412)
+
 * Fri Sep 18 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-6
 - Fix SELinux policy module for UserEmailInfo.pl file