e-smith-quota/sme7/e-smith-quota-1.10.0-UntaintAccountName.patch

diff -Nur -x '*.orig' -x '*.rej' e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm
--- e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm  2006-07-17 03:38:24.000870928 +1000
+++ mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm        2006-07-17 03:35:43.042014668 +1000
@@ -318,7 +318,7 @@
     $rec->set_prop('MaxBlocksSoftLim', $softlim);
 
     # Untaint $acct before using in system().
-    $acct =~ /(\w*)/; $acct = $1;
+    $acct =~ /^(\w[\-\w_\.]+)$/; $acct = $1;
     system ("/sbin/e-smith/signal-event", "user-modify", "$acct") == 0
         or die ($self->localise('ERR_MODIFYING')."\n");
 
1	diff -Nur -x '.orig' -x '.rej' e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm
2	--- e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm 2006-07-17 03:38:24.000870928 +1000
3	+++ mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm 2006-07-17 03:35:43.042014668 +1000
4	@@ -318,7 +318,7 @@
5	$rec->set_prop('MaxBlocksSoftLim', $softlim);
6
7	# Untaint $acct before using in system().
8	- $acct =~ /(\w*)/; $acct = $1;
9	+ $acct =~ /^(\w[\-\w_\.]+)$/; $acct = $1;
10	system ("/sbin/e-smith/signal-event", "user-modify", "$acct") == 0
11	or die ($self->localise('ERR_MODIFYING')."\n");
12