# HG changeset patch # User mas90 # Date 1233764018 0 # Wed Feb 04 16:13:38 2009 +0000 # Node ID 87d0151ecf4a4c9f6aa2fb0557986192c9dbfb0e # Parent d0bc7fd4b684db018c97e894c0ee27007422a057 Better way to install databases atomically, using rsync (no symlink attack) diff --git a/fetch-sanesecurity-sigs b/fetch-sanesecurity-sigs --- a/fetch-sanesecurity-sigs +++ b/fetch-sanesecurity-sigs @@ -218,8 +218,7 @@ # Now we can actually install this database echo "Installing $db_name into $clamd_dbdir/sanesecurity-$db_name" - if cp -p "$db" "$clamd_dbdir/sanesecurity-$db_name.tmp" && \ - mv -f "$clamd_dbdir/sanesecurity-$db_name.tmp" "$clamd_dbdir/sanesecurity-$db_name" + if rsync -p "$db" "$clamd_dbdir/sanesecurity-$db_name" then installed=$((installed+1))