Issue #615
closed
uploading hidden files shouldn't be allowed
Description
Description of problem:
When one specifies the directory from which to upload files, the hidden files also will be uploaded.
Version-Release number of selected component (if applicable):
rpm -qa | grep pulp-server
pulp-server-2.5.0-0.18.rc.fc20.noarch
How reproducible:
always
Steps to Reproduce:
ls -la
total 376824
drwxr-xr-x. 2 root root 4096 Nov 3 17:03 .
dr-xr-x---. 10 root root 4096 Nov 3 16:42 ..
rw-r--r-. 1 root root 385859072 Nov 3 16:43 .fedora.tar
pulp-admin docker repo uploads upload --repo-id hidden_tar -d /root/for_pulp_uploads
--------------------------------------------------------------------
Unit Upload
--------------------------------------------------------------------
Extracting necessary metadata for each request...
[==================================================] 100%
Analyzing: .fedora.tar
... completed
Creating upload requests on the server...
[==================================================] 100%
Initializing: .fedora.tar
... completed
Starting upload of selected units. If this process is stopped through ctrl+c,
the uploads will be paused and may be resumed later using the resume command or
cancelled entirely using the cancel command.
Uploading: .fedora.tar
[==================================================] 100%
385859072/385859072 bytes
... completed
Importing into the repository...
This command may be exited via ctrl+c without affecting the request.
[\]
Running...
Task Succeeded
Deleting the upload request...
... completed
pulp-admin -u admin -p admin docker repo list
--------------------------------------------------------------------
Docker Repositories
--------------------------------------------------------------------
Id: hidden_tar
Display Name: hidden_tar
Description: None
Content Unit Counts:
Docker Image: 3
It's the same for rpm repos/files
ls -la
total 16
drwxr-xr-x. 2 root root 4096 Nov 12 19:08 .
dr-xr-x---. 11 root root 4096 Nov 12 19:02 ..
rw-r--r-. 1 root root 2438 Mar 28 2012 bear-4.1-1.noarch.rpm
rw-r--r-. 1 root root 2452 Mar 28 2012 .gorilla-0.62-1.noarch.rpm
pulp-admin rpm repo uploads rpm -d for_rpm --repo-id gena
--------------------------------------------------------------------
Unit Upload
--------------------------------------------------------------------
Extracting necessary metadata for each request...
[==================================================] 100%
Analyzing: bear-4.1-1.noarch.rpm
... completed
Creating upload requests on the server...
[==================================================] 100%
Initializing: bear-4.1-1.noarch.rpm
... completed
Starting upload of selected units. If this process is stopped through ctrl+c,
the uploads will be paused and may be resumed later using the resume command or
cancelled entirely using the cancel command.
Uploading: .gorilla-0.62-1.noarch.rpm
[==================================================] 100%
2452/2452 bytes
... completed
Importing into the repository...
This command may be exited via ctrl+c without affecting the request.
[\]
Running...
Task Succeeded
Deleting the upload request...
... completed
Uploading: bear-4.1-1.noarch.rpm
[==================================================] 100%
2438/2438 bytes
... completed
Importing into the repository...
This command may be exited via ctrl+c without affecting the request.
[\]
Running...
Task Succeeded
Deleting the upload request...
... completed
pulp-admin rpm repo list
--------------------------------------------------------------------
RPM Repositories
--------------------------------------------------------------------
Id: gena
Display Name: gena
Description: None
Content Unit Counts:
Rpm: 2
+ This bug was cloned from Bugzilla Bug #1163488 +
Updated by bmbouter about 5 years ago
- Status changed from NEW to CLOSED - WONTFIX
Updated by bmbouter about 5 years ago
Pulp 2 is approaching maintenance mode, and this Pulp 2 ticket is not being actively worked on. As such, it is being closed as WONTFIX. Pulp 2 is still accepting contributions though, so if you want to contribute a fix for this ticket, please reopen or comment on it. If you don't have permissions to reopen this ticket, or you want to discuss an issue, please reach out via the developer mailing list.
.