From 22be9a1c0173a232d651059d84145bb6f51d3f67 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Fri, 30 Aug 2019 07:50:43 +0200 Subject: cgi-io: require whitelisting upload locations Introduce further ACL checks to verify that the request-supplied upload location may be written to. This prevents overwriting things like /bin/busybox and allows to confine uploads to specific directories. To setup the required ACLs, the following ubus command may be used on the command line: ubus call session grant '{ "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e", "scope": "cgi-io", "objects": [ [ "/etc/certificates/*", "write" ], [ "/var/uploads/*", "write" ] ] }' Signed-off-by: Jo-Philipp Wich --- net/cgi-io/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'net/cgi-io/Makefile') diff --git a/net/cgi-io/Makefile b/net/cgi-io/Makefile index 2a734b5e5..5fff39f85 100644 --- a/net/cgi-io/Makefile +++ b/net/cgi-io/Makefile @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=cgi-io -PKG_RELEASE:=6 +PKG_RELEASE:=7 PKG_LICENSE:=GPL-2.0+ -- cgit v1.2.3