dnf5daemon: Remove reposdir from allowed config overrides

The option is potentially dangerous and can cause dnf5daemon-server to block on malicious reposdir.
rpm-software-management · Apr 3, 2024 · 07c5770 · 07c5770
1 parent 0343b01
commit 07c5770
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/dnf5daemon-server/session.cpp b/dnf5daemon-server/session.cpp
@@ -60,7 +60,6 @@ static const std::unordered_set<std::string> ALLOWED_MAIN_CONF_OVERRIDES = {
     "obsoletes",
     "optional_metadata_types",
     "protect_running_kernel",
-    "reposdir",
     "skip_broken",
     "skip_if_unavailable",
     "skip_unavailable",