Project

Profile

Help

Issue #615

closed

uploading hidden files shouldn't be allowed

Added by igulina@redhat.com about 9 years ago. Updated about 5 years ago.

Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
2.5
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

Description of problem:
When one specifies the directory from which to upload files, the hidden files also will be uploaded.

Version-Release number of selected component (if applicable):

rpm -qa | grep pulp-server

pulp-server-2.5.0-0.18.rc.fc20.noarch

How reproducible:
always

Steps to Reproduce:

ls -la

total 376824
drwxr-xr-x. 2 root root 4096 Nov 3 17:03 .
dr-xr-x---. 10 root root 4096 Nov 3 16:42 ..
rw-r--r-. 1 root root 385859072 Nov 3 16:43 .fedora.tar

pulp-admin docker repo uploads upload --repo-id hidden_tar -d /root/for_pulp_uploads

--------------------------------------------------------------------
Unit Upload
--------------------------------------------------------------------

Extracting necessary metadata for each request...
[==================================================] 100%
Analyzing: .fedora.tar
... completed

Creating upload requests on the server...
[==================================================] 100%
Initializing: .fedora.tar
... completed

Starting upload of selected units. If this process is stopped through ctrl+c,
the uploads will be paused and may be resumed later using the resume command or
cancelled entirely using the cancel command.

Uploading: .fedora.tar
[==================================================] 100%
385859072/385859072 bytes
... completed

Importing into the repository...
This command may be exited via ctrl+c without affecting the request.

[\]
Running...

Task Succeeded

Deleting the upload request...
... completed

pulp-admin -u admin -p admin docker repo list

--------------------------------------------------------------------
Docker Repositories
--------------------------------------------------------------------

Id: hidden_tar
Display Name: hidden_tar
Description: None
Content Unit Counts:
Docker Image: 3

It's the same for rpm repos/files

ls -la

total 16
drwxr-xr-x. 2 root root 4096 Nov 12 19:08 .
dr-xr-x---. 11 root root 4096 Nov 12 19:02 ..
rw-r--r-. 1 root root 2438 Mar 28 2012 bear-4.1-1.noarch.rpm
rw-r--r-. 1 root root 2452 Mar 28 2012 .gorilla-0.62-1.noarch.rpm

pulp-admin rpm repo uploads rpm -d for_rpm --repo-id gena

--------------------------------------------------------------------
Unit Upload
--------------------------------------------------------------------

Extracting necessary metadata for each request...
[==================================================] 100%
Analyzing: bear-4.1-1.noarch.rpm
... completed

Creating upload requests on the server...
[==================================================] 100%
Initializing: bear-4.1-1.noarch.rpm
... completed

Starting upload of selected units. If this process is stopped through ctrl+c,
the uploads will be paused and may be resumed later using the resume command or
cancelled entirely using the cancel command.

Uploading: .gorilla-0.62-1.noarch.rpm
[==================================================] 100%
2452/2452 bytes
... completed

Importing into the repository...
This command may be exited via ctrl+c without affecting the request.

[\]
Running...

Task Succeeded

Deleting the upload request...
... completed

Uploading: bear-4.1-1.noarch.rpm
[==================================================] 100%
2438/2438 bytes
... completed

Importing into the repository...
This command may be exited via ctrl+c without affecting the request.

[\]
Running...

Task Succeeded

Deleting the upload request...
... completed

pulp-admin rpm repo list

--------------------------------------------------------------------
RPM Repositories
--------------------------------------------------------------------

Id: gena
Display Name: gena
Description: None
Content Unit Counts:
Rpm: 2

+ This bug was cloned from Bugzilla Bug #1163488 +

Also available in: Atom PDF