From 770a08bc117c896db568192aaf78e39ffc34a152 Mon Sep 17 00:00:00 2001
From: Alejandro Colomar <alx@kernel.org>
Date: Mon, 23 Dec 2024 11:06:33 +0100
Subject: [PATCH] lib/chkname.c, src/: Strictly disallow really bad names

Some names are bad, and some names are really bad.  '--badname' should
only allow the mildly bad ones, which we can handle.  Some names are too
bad, and it's not possible to deal with them.  Reject them
unconditionally.

Acked-by: Chris Hofstaedtler <zeha@debian.org>
Acked-by: Tobias Stoeckmann <tobias@stoeckmann.org>
Cc: Marc 'Zugschlus' Haber <mh+githubvisible@zugschlus.de>
Cc: Iker Pedrosa <ipedrosa@redhat.com>
Cc: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Alejandro Colomar <alx@kernel.org>
---
 lib/chkname.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/chkname.c b/lib/chkname.c
index ee8ff9d108..9687af9a0d 100644
--- a/lib/chkname.c
+++ b/lib/chkname.c
@@ -55,7 +55,7 @@ is_valid_name(const char *name)
 	 || streq(name, ".")
 	 || streq(name, "..")
 	 || strspn(name, "-")
-	 || strpbrk(name, " \"#',/:;")
+	 || strpbrk(name, " !\"#'&*+,/:;@|~")
 	 || strchriscntrl_c(name)
 	 || strisdigit_c(name))
 	{