From 04ab37fecaf286f724bef2e0969d2b67ab5ac1b1 Mon Sep 17 00:00:00 2001
From: David Kalnischkies <david@kalnischkies.de>
Date: Sat, 28 Oct 2017 00:01:27 +0200
Subject: require methods to request AuxRequest capability at startup
Allowing a method to request work from other methods is a powerful
capability which could be misused or exploited, so to slightly limited
the surface let method opt-in into this capability on startup.
---
methods/mirror.cc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'methods')
diff --git a/methods/mirror.cc b/methods/mirror.cc
index ad8867836..ee703aaae 100644
--- a/methods/mirror.cc
+++ b/methods/mirror.cc
@@ -64,7 +64,7 @@ class MirrorMethod : public aptMethod /*{{{*/
void DealWithPendingItems(std::vector<std::string> const &baseuris, MirrorInfo const &info, FetchItem *const Itm, std::function<void()> handler);
public:
- MirrorMethod(std::string &&pProg) : aptMethod(std::move(pProg), "2.0", SingleInstance | Pipeline | SendConfig)
+ MirrorMethod(std::string &&pProg) : aptMethod(std::move(pProg), "2.0", SingleInstance | Pipeline | SendConfig | AuxRequests)
{
SeccompFlags = aptMethod::BASE | aptMethod::DIRECTORY;
--
cgit v1.2.3