From 128cb61eaa83ea2f9fb5350fcc3dae6b7b5e5f4c Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Mon, 25 Apr 2022 13:11:43 -0400 Subject: [PATCH] Fix directory traversal --- genesis/buildgenesis.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/genesis/buildgenesis.sh b/genesis/buildgenesis.sh index 014c4f25..fbf82e60 100644 --- a/genesis/buildgenesis.sh +++ b/genesis/buildgenesis.sh @@ -8,11 +8,11 @@ dracut --no-early-microcode --xz -N -m "genesis base" -f boot/initramfs/distribu tdir=$(mktemp -d) tfile=$(mktemp) cp boot/initramfs/distribution $tdir -cd $tdir +pushd $tdir xzcat distribution|cpio -dumi rm distribution find . -type f -exec rpm -qf /{} \; 2> /dev/null | grep -v 'not owned' | sort -u > $tfile -cd - +popd rm -rf $tdir cp $tfile rpmlist cp -f /boot/vmlinuz-$(uname -r) boot/kernel