Security issue with Hobbit "config" command.

On Wed, Aug 02, 2006 at 10:11:42AM -0500, Kruse, Jason K. wrote:

The config directive does not stay locked into the etc directory but will follow ../.. to allow access to any file the hobbit user has access to on the system.

Thanks, this was not meant to happen. There was actually a security check in the code, but it got two parameters in the wrong order, so it would always grant access. A patch is attached.

Regards, Henrik