Remove ClientNameAlias directive from CgiUserConfigEdit list to avoid

security hole (bug #518412)

BackupPC.spec

@@ -6,7 +6,7 @@
 
 Name:           BackupPC
 Version:        3.1.0
-Release:        6%{?dist}
+Release:        7%{?dist}
 Summary:        High-performance backup system
 
 Group:          Applications/System
@@ -150,6 +150,7 @@ sed -i s,$LOGNAME,backuppc,g init.d/linux-backuppc
 
 sed -i 's/^\$Conf{XferMethod}\ =.*/$Conf{XferMethod} = "rsync";/' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
 sed -i 's|^\$Conf{CgiURL}\ =.*|$Conf{CgiURL} = "http://localhost/BackupPC";|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
+sed -i 's|ClientNameAlias           => 1,|ClientNameAlias           => 0,|' $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/config.pl
 
 %if %{useselinux}
      # SElinux 
@@ -226,6 +227,9 @@ fi
 %endif
 
 %changelog
+* Fri Sep 25 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-7
+- Fix security bug (bug #518412)
+
 * Fri Sep 18 2009 Johan Cwiklinski <johan AT x-tnd DOT be> 3.1.0-6
 - Fix SELinux policy module for UserEmailInfo.pl file