#3321 Issue open: BACKUP=GALAXY: Verify that sourcing ./GxCmd can be trusted¶

Labels: discuss / RFC

jsmeix opened issue at 2024-09-17 09:57:¶

See
https://github.com/rear/rear/issues/3319#issuecomment-2355118862
(excerpts):

usr/share/rear/restore/GALAXY/default/400_restore_with_galaxy.sh:
       . ./GxCmd
...
... it seems GxCmd (and GxCmdLine) belong to
the BACKUP=GALAXY software.
In this case it is probably OK to source GxCmd
because the BACKUP=GALAXY software can be trusted.
Nevertheless it should be verified ...
... that '. ./GxCmd' can be trusted

jsmeix commented at 2024-09-17 10:07:¶

Right now I replaced '.' by 'source' via
https://github.com/rear/rear/commit/f3de9e84949f181b5eb8ab8a1e702e87c5d236d5

---

[Export of Github issue for rear/rear.]