diff options
Diffstat (limited to 'src/run')
| -rwxr-xr-x | src/run | 7 |
1 files changed, 4 insertions, 3 deletions
@@ -19,10 +19,11 @@ set -l repo $matcher[2] # adjust repo path to /srv/repos set -l repoDir /(string join -n '/' srv repos (string split '/' $repo)) -# check repo jail in /srv/repos -if not string match -r -q -- "/srv/repos/.*" "(realpath $repoDir)" +# check if realPath is in jail under /srv/repos +set -l realPath (realpath $repoDir) +if not string match -r -q -- "/srv/repos/.*" "$realPath" # something is for sure wrong here - echo "$(date -Is): DENY jail_escape user=$currentUser ip=$SSH_CONNECTION argv=$argv" &>>$_LOG + echo "$(date -Is): DENY jail_escape user=$currentUser ip=$SSH_CONNECTION realPath=$realPath argv=$argv" &>>$_LOG exit 2 end |