92
72%

Ran 22 Jan 2016 03:19PM UTC

Jobs 7

Files 9

Run time 4min

Badge

Embed ▾

pending completion

Build # 92

Build Type

push

travis-ci

Committed by

snordhausen

Commit Message

Fix security issues in pre-install script

- Having $HOME in /tmp means everyone can create e.g. a .bashrc in your home dir
- "chown -R" on the logdir is problematic when an attacker takes over alppaca
  and places hardlinks to files that alppaca should not be able to access in
  that directory. The next time the pre-install script runs, it would chown
  the hardlinked file to alppaca.
- Having /etc/alppaca writable for alppaca itself means that an attacker that
  takes over alppaca can re-configure alppaca to run as root and then take
  over the privileged alppaca process.

Run Details

225 of 294 relevant lines covered (76.53%)

5.36 hits per line

Jobs

ID	Job ID	Ran	Coverage
1	92.1	22 Jan 2016 03:20PM UTC	76.53	Travis Job 92.1
2	92.2	22 Jan 2016 03:20PM UTC	76.53	Travis Job 92.2
3	92.3	22 Jan 2016 03:20PM UTC	76.53	Travis Job 92.3
4	92.4	22 Jan 2016 03:19PM UTC	76.53	Travis Job 92.4
5	92.5	22 Jan 2016 03:20PM UTC	76.53	Travis Job 92.5
6	92.6	22 Jan 2016 03:22PM UTC	76.53	Travis Job 92.6
7	92.7	22 Jan 2016 03:24PM UTC	76.53	Travis Job 92.7

Source Files on build 92

Detailed source file information is not available for this build.

ImmobilienScout24 / afp-alppaca / 92
72%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 92

ImmobilienScout24 / afp-alppaca / 92 72%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 92

ImmobilienScout24 / afp-alppaca / 92
72%

README BADGES
x