Files
packages/net
Dirk Brenken 0627b412ee travelmate: update 2.4.6-2
harden captive portal auto-login script handling:
* enforce the login-script allowlist in the backend instead of the
  LuCI frontend only: canonicalize the configured path via 'readlink -f'
  (defeats ../ traversal and symlink-to-interpreter tricks) and require a
  regular, executable /etc/travelmate/*.login file before running it
* run the script in a noglob subshell ('set -f') so attacker-influenceable
  script_args can no longer expand globs into the trusted script; field
  splitting (multiple args) is preserved
* writing into /etc/travelmate/ is not covered by the luci-app-travelmate
  ACL, so this limits the root-executed script to admin-placed login scripts
  and closes a delegated-ACL to root command execution path.

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-06-17 20:58:27 +02:00
..
2026-06-13 16:54:53 +02:00
2026-06-08 14:35:30 +03:00
2026-05-08 22:28:27 +02:00
2026-06-12 22:28:10 +02:00
…
2026-05-29 09:25:01 -04:00
…
2026-06-05 07:36:16 +03:00
2026-05-06 21:05:02 +03:00
2026-06-15 10:44:19 +08:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-22 06:59:39 +03:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
2026-05-24 15:57:00 +03:00
2026-06-15 11:36:18 +08:00
2026-05-09 11:34:18 +08:00
2026-05-09 10:57:17 +08:00
…
2026-05-08 22:28:27 +02:00
2026-06-02 09:49:19 +03:00
2026-05-08 22:36:07 +02:00
2026-05-24 15:28:30 +03:00
…
…
2026-05-14 15:39:33 +03:00
2026-05-15 13:44:24 +01:00
2026-05-15 13:44:24 +01:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-06-14 20:33:53 +03:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-06-15 19:03:26 +02:00
…
2026-06-03 08:26:46 +02:00
…
…
2026-05-08 22:28:27 +02:00
2026-05-14 15:39:33 +03:00
2026-05-08 22:28:27 +02:00
…
…
…
2026-05-05 15:16:20 +03:00
2026-05-08 22:28:27 +02:00
2026-05-24 14:14:28 +02:00
2026-05-08 22:28:27 +02:00
2026-06-04 08:40:16 +03:00
2026-06-05 07:35:45 +03:00
2026-06-07 20:21:09 +02:00
2026-05-14 15:39:33 +03:00
2026-06-07 12:11:57 +02:00
…
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-06-15 11:37:09 +08:00
2026-05-22 07:11:38 +03:00
2026-05-08 22:28:27 +02:00
…
…
…
2026-05-13 20:57:12 +03:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-06-15 11:36:39 +08:00
2026-05-08 22:28:27 +02:00
2026-06-09 23:15:24 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-13 20:57:12 +03:00
…
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-25 07:05:22 +03:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
2026-06-08 14:35:49 +03:00
2026-06-17 20:58:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-08 22:28:27 +02:00
2026-05-28 11:17:42 +02:00
2026-05-08 22:28:27 +02:00
2026-05-19 10:59:49 +08:00
2026-05-19 08:50:43 +03:00
2026-05-08 22:28:27 +02:00
…
2026-05-08 22:28:27 +02:00
…
…
2026-05-08 22:28:27 +02:00
2026-06-14 20:45:09 +03:00
2026-05-08 22:28:27 +02:00
…