mirror of
https://github.com/ansible-collections/community.general.git
synced 2026-04-01 00:03:10 +00:00
Place retry file in the user's home dir instead of /var/lib/tmp
Addresses CVE-2013-4260: predictable filename used for failed results in world writable directory.
This commit is contained in:
@@ -477,13 +477,7 @@ class PlayBook(object):
|
||||
basedir = self.inventory.basedir()
|
||||
filename = "%s.retry" % os.path.basename(self.filename)
|
||||
filename = filename.replace(".yml","")
|
||||
|
||||
if not os.path.exists('/var/tmp/ansible'):
|
||||
try:
|
||||
os.makedirs('/var/tmp/ansible')
|
||||
except:
|
||||
pass
|
||||
filename = os.path.join('/var/tmp/ansible', filename)
|
||||
filename = os.path.join(os.path.expandvars('$HOME/'), filename)
|
||||
|
||||
try:
|
||||
fd = open(filename, 'w')
|
||||
|
||||
Reference in New Issue
Block a user