From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
From: Bastian Stender <bst@pengutronix.de>
Date: Fri,  5 Jan 2018 18:37:19 +0100
Message-Id: <20180105173719.3005-2-bst@pengutronix.de>
In-Reply-To: <20180105173719.3005-1-bst@pengutronix.de>
References: <20180105173719.3005-1-bst@pengutronix.de>
Subject: [ptxdist] [PATCH 2/2] python3: prevent host path leakage
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Bastian Stender <bst@pengutronix.de>
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