#4377 Webmin does not handle Dot (.) in home directory path correctly...

All
closed-fixed
7
2014-02-14
2014-02-13
Steven Page
No

Noticed some thing else while we have been preparing for launch...

for example, if you log in as a regular user, and go to "restore backup", if there is a dot (.) in the home directory, commonly used by things like dovecot, jk_procmailwrapper, and some ssh setups, it will report "directory does not exist"

Seems that it does not correctly handle the dot in the home directory path within regard to pseudo chroot paths such as /home/jail/./home/USER

thanks!

Discussion

  • Steven Page

    Steven Page - 2014-02-13

    i just noticed the GET url statement looks like this:

    chooser.cgi?add=0&type=0&chroot=/home/jail/home/USER/virtualmin-backup&file=

    which looks like it does seem to be (trying?) to handle the chroot.. unless this applies to the file manager ACL

    regardless, i checjed to see if "virtualmin-backup" exists, and it does, yet i still receive the error:

    Listing failed : No such file or directory

    • if i notice anything out of the ordinary in the miniserv error log, i will be sure to post it back here

    thanks again guys!

     
  • Jamie Cameron

    Jamie Cameron - 2014-02-13

    Which module are you seeing this error in, and when performing which action?

     
  • Steven Page

    Steven Page - 2014-02-13

    So far, one place i have noticed breakage was under: Virtualmin Virtual Servers -> Restore Backups -> File or directory under virtualmin-backup/ ->

    when clicking the browse button, it loads a pop up, which complains:

    Directory of /home/jail/./home/USER/
    Listing failed : No such file or directory

    The cgi file appears to be: chooser.cgi

    The GET parameters included are: add=0&type=0&chroot=/home/jail/home/USER/virtualmin-backup&file=

    Thanks!

     
  • Jamie Cameron

    Jamie Cameron - 2014-02-14

    Ok, I see the bug now - this will be fixed in the next release of Virtualmin.

     
  • Jamie Cameron

    Jamie Cameron - 2014-02-14
    • status: open --> closed-fixed
     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks