6
72%
master: 72%

Ran 22 Jan 2016 03:22PM UTC

Files 9

Run time 0s

Badge

Embed ▾

Committed 22 Jan 2016 03:19PM UTC coverage: 76.531%. Remained the same

Job # 92.6

Build Type

push

travis-ci

Committed by

snordhausen

Commit Message

Fix security issues in pre-install script

- Having $HOME in /tmp means everyone can create e.g. a .bashrc in your home dir
- "chown -R" on the logdir is problematic when an attacker takes over alppaca
  and places hardlinks to files that alppaca should not be able to access in
  that directory. The next time the pre-install script runs, it would chown
  the hardlinked file to alppaca.
- Having /etc/alppaca writable for alppaca itself means that an attacker that
  takes over alppaca can re-configure alppaca to run as root and then take
  over the privileged alppaca process.

Run Details

225 of 294 relevant lines covered (76.53%)

0.77 hits per line

ImmobilienScout24 / afp-alppaca / 92 / 6
72%
master: 72%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 92.6

ImmobilienScout24 / afp-alppaca / 92 / 6 72% master: 72%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 92.6

ImmobilienScout24 / afp-alppaca / 92 / 6
72%
master: 72%

README BADGES
x