cyberpresidentvanellope/tgstation-server
1
0
Fork 0
mirror of https://github.com/tgstation/tgstation-server.git synced 2026-08-30 16:39:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Only trust the .dmb in trusted mode

Browse Source
This commit is contained in:
Jordan Brown
2020-04-22 13:09:44 -04:00
parent 4e418cd3e6
commit f62d827fbf
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Tgstation.Server.Host/Components/Watchdog/SessionControllerFactory.cs
+2 -1
View File
@@ -236,7 +236,8 @@ namespace Tgstation.Server.Host.Components.Watchdog
var byondLock = currentByondLock ?? await byond.UseExecutables(Version.Parse(dmbProvider.CompileJob.ByondVersion), cancellationToken).ConfigureAwait(false);
try
{
await byondLock.TrustDmbPath(ioManager.ConcatPath(basePath, dmbProvider.DmbName), cancellationToken).ConfigureAwait(false);
if (securityLevelToUse == DreamDaemonSecurity.Trusted)
await byondLock.TrustDmbPath(ioManager.ConcatPath(basePath, dmbProvider.DmbName), cancellationToken).ConfigureAwait(false);
// set command line options
// more sanitization here cause it uses the same scheme