e-smith-quota/sme8/e-smith-quota-1.10.0-UntaintAccountName.patch

diff -Nur -x '*.orig' -x '*.rej' e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm
--- e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm  2006-07-17 03:38:24.000870928 +1000
+++ mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm        2006-07-17 03:35:43.042014668 +1000
@@ -318,7 +318,7 @@
     $rec->set_prop('MaxBlocksSoftLim', $softlim);
 
     # Untaint $acct before using in system().
-    $acct =~ /(\w*)/; $acct = $1;
+    $acct =~ /^(\w[\-\w_\.]+)$/; $acct = $1;
     system ("/sbin/e-smith/signal-event", "user-modify", "$acct") == 0
         or die ($self->localise('ERR_MODIFYING')."\n");
 
1	slords	1.1	diff -Nur -x '.orig' -x '.rej' e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm
2			--- e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm 2006-07-17 03:38:24.000870928 +1000
3			+++ mezzanine_patched_e-smith-quota-1.10.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/quota.pm 2006-07-17 03:35:43.042014668 +1000
4			@@ -318,7 +318,7 @@
5			$rec->set_prop('MaxBlocksSoftLim', $softlim);
6
7			# Untaint $acct before using in system().
8			- $acct =~ /(\w*)/; $acct = $1;
9			+ $acct =~ /^(\w[\-\w_\.]+)$/; $acct = $1;
10			system ("/sbin/e-smith/signal-event", "user-modify", "$acct") == 0
11			or die ($self->localise('ERR_MODIFYING')."\n");
12