[ARVADOS] updated: e76418b037477b700037652bec9dcba98839e14b

[git at public.curoverse.com]

Summary of changes:
 sdk/pam/arvados_pam.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

       via  e76418b037477b700037652bec9dcba98839e14b (commit)
      from  99c4b804af44311d95e0b0ab72521471a1166347 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit e76418b037477b700037652bec9dcba98839e14b
Author: Nico Cesar <nico at curoverse.com>
Date:   Wed Jul 8 16:44:18 2015 -0400

    qiuck fix to arvados-pam vulnerability
    
    no issue #

diff --git a/sdk/pam/arvados_pam.py b/sdk/pam/arvados_pam.py
index af87e2c..b38e54f 100644
--- a/sdk/pam/arvados_pam.py
+++ b/sdk/pam/arvados_pam.py
@@ -17,11 +17,12 @@ def check_arvados_token(requested_username, token):
 
     try:
         f=file('/etc/default/arvados_pam')
-        config=dict([l for l in f.readlines() if not l.startswith('#') or l.strip()==""])
+        config=dict([l.split('=') for l in f.readlines() if not l.startswith('#') or l.strip()==""])
         arvados_api_host=config['ARVADOS_API_HOST'].strip()
         hostname=config['HOSTNAME'].strip()
     except Exception as e:
-        auth_log("problem getting default values" % (str(e)))
+        auth_log("problem getting default values  %s" % e)
+        return False
 
     try:
         arv = arvados.api('v1',host=arvados_api_host, token=token, cache=None)

-----------------------------------------------------------------------


hooks/post-receive
--