Disallow ':' as the only contents of the USER/GROUP column

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-09-16 16:25:41 -07:00
parent 124dafbf52
commit fc361afbc3

View File

@ -4326,7 +4326,7 @@ sub do_user( $ ) {
require_capability 'OWNER_MATCH', 'A non-empty USER column', 's';
assert ( $user =~ /^(!)?(.*?)(:(.*))?$/ );
assert( $user =~ /^(!)?(.*?)(:(.+))?$/ );
my $invert = $1 ? '! ' : '';
my $group = supplied $4 ? $4 : '';