1
0
mirror of https://codeberg.org/kiss-community/kiss synced 2024-07-02 14:02:26 +00:00

kiss: comment

This commit is contained in:
Dylan Araps 2020-01-27 23:36:51 +02:00
parent 4f4d220056
commit 3962f64385
No known key found for this signature in database
GPG Key ID: 46D62DD9F1DE636E

4
kiss
View File

@ -84,6 +84,10 @@ root_cache() {
# Validate the password now with a simple 'true' command as we # Validate the password now with a simple 'true' command as we
# don't yet need to elevate permissions. # don't yet need to elevate permissions.
#
# Rather than checking if the '$pass' variable is non-empty,
# use an additional variable. The '[' command can be external
# which would result in '/proc' leakage.
dosu /bin/true && have_pw=1 dosu /bin/true && have_pw=1
} }