upstream/borgbackup
1
0
Fork 0
mirror of https://github.com/borgbackup/borg.git synced 2026-02-24 10:21:05 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
borgbackup/src/borg
History
Thomas Waldmann 1b277cb1ff security fix: configure FUSE with "default_permissions", fixes #3903 
"default_permissions" is now enforced by borg by default to let the
kernel check uid/gid/mode based permissions.

"ignore_permissions" can be given to not enforce "default_permissions".

note: man mount.fuse explicitly tells about the security issue:

    default_permissions
	By  default FUSE doesn't check file access permissions, ...
	This option enables permission checking, restricting access
	based on file mode.
	This option is usually useful together with the allow_other
	mount option.

We consider this a pitfall waiting for someone to fall into and this is
why we chose to change the default behaviour for borg.
2019-02-10 10:21:48 +01:00
..
algorithms add "# cython: language_level=3" directive to .pyx files, fixes #4214 2019-01-05 20:12:32 +01:00
cache_sync fixup: rename expect_chunks_map_key state to expect_map_key 2019-02-05 14:42:43 +01:00
crypto add "# cython: language_level=3" directive to .pyx files, fixes #4214 2019-01-05 20:12:32 +01:00
platform work around some Microsoft WSL issues 2019-02-05 01:30:54 +01:00
testsuite borg init --make-parent-dirs parent1/parent2/repo_dir, fixes #4235 2019-02-05 14:32:56 +01:00
__init__.py Improve robustness of monkey patching borg.constants.PBKDF2_ITERATIONS. And add lots of warnings. 2017-06-10 11:42:42 +02:00
__main__.py move borg package to src/ 2016-05-05 20:19:50 +02:00
_chunker.c add parens for C preprocessor macro argument usages 2017-12-15 00:50:06 +01:00
_endian.h create _endian.h 2017-07-11 19:12:19 +02:00
_hashindex.c add parens for C preprocessor macro argument usages 2017-12-15 00:50:06 +01:00
archive.py Merge pull request #4326 from ThomasWaldmann/backports-16 2019-02-05 16:18:32 +01:00
archiver.py security fix: configure FUSE with "default_permissions", fixes #3903 2019-02-10 10:21:48 +01:00
cache.py avoid diaper pattern in configparser by opening files, fixes #4263 2019-01-27 01:36:52 +01:00
chunker.pyx add "# cython: language_level=3" directive to .pyx files, fixes #4214 2019-01-05 20:12:32 +01:00
compress.pyx add "# cython: language_level=3" directive to .pyx files, fixes #4214 2019-01-05 20:12:32 +01:00
constants.py make sure all segment file offsets fit into uint32, fixes #3592 2018-03-17 21:34:42 +01:00
fuse.py security fix: configure FUSE with "default_permissions", fixes #3903 2019-02-10 10:21:48 +01:00
hashindex.pyx cache_sync: compute size/count stats, borg info: consider part files 2019-02-05 14:42:31 +01:00
helpers.py work around some Microsoft WSL issues 2019-02-05 01:30:54 +01:00
item.pyx add "# cython: language_level=3" directive to .pyx files, fixes #4214 2019-01-05 20:12:32 +01:00
locking.py locking: more logging 2018-07-17 00:18:57 +02:00
logger.py logging with fileConfig: set json attr on "borg" logger, fixes #3114 2017-10-11 01:10:11 +02:00
lrucache.py lrucache: use explicit sentinel instead of None 2017-06-16 00:41:38 +02:00
nanorst.py nanorst: add missing blank to exception message 2018-07-13 10:44:17 +02:00
paperkey.html key export: center QR code on the page 2017-02-13 21:24:33 +01:00
patterns.py be more helpful when parsing invalid --pattern values 2018-03-17 21:37:40 +01:00
remote.py borg init --make-parent-dirs parent1/parent2/repo_dir, fixes #4235 2019-02-05 14:32:56 +01:00
repository.py borg init --make-parent-dirs parent1/parent2/repo_dir, fixes #4235 2019-02-05 14:32:56 +01:00
selftest.py Add tertiary authentication for metadata (TAM) 2016-12-20 22:53:53 +01:00
shellpattern.py Moving the flags of the compiled regex to the front to fix #4137 2018-11-02 00:37:35 +01:00
upgrader.py added BORG_BASE_DIR, s/get_home_dir/get_base_dir/g, docs, fixes #3338 2017-12-23 18:09:16 +01:00
version.py version: add missing test for format_version, fix bug 2017-06-27 10:11:57 +02:00
xattr.py xattr: add linux {list,get,set}xattr ctypes prototypes 2018-07-03 22:32:37 +02:00