Re: [BackupPC-devel] BackupPC 4.0.0alpha2 released

[Kenneth P. <sh...@se...>]

I'm looking through the source RPM for 3.2.1 with intent to adapt it to 
4.0.0 and it applies a number of patches, including some security ones.

Here's the content of the 3.2.1 source RPM:

<http://pkgs.fedoraproject.org/cgit/BackupPC.git/tree/>

It looks like all but one of the .patch files should be applied. 
/BackupPC-3.2.1-fix-XSS-vulnerability2.patch is already applied but the 
other XSS patch is not.

Two of the patches put the pid file and the socket in /var/run/BackupPC 
rather than in the log directory, which I think is for selinux compliance.

The qw patch fixes a Perl warning.

The locatedb patch adds a check in the initscript to warn if the backups 
are indexed (a potentially big performance hit if they are).