gitlab: add rake task to delete tokens

The information disclosure was caued by CVE-2017-0882.
2017-03-21 13:16:54 +01:00
parent 4bd12fa7b2
commit 219e91b4c6
2 changed files with 47 additions and 0 deletions
@@ -91,6 +91,10 @@ stdenv.mkDerivation rec {
    cp -r . $out/share/gitlab
    ln -sf /run/gitlab/uploads $out/share/gitlab/public/uploads
    ln -sf /run/gitlab/config $out/share/gitlab/config
+
+    # rake tasks to mitigate CVE-2017-0882
+    # see https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/
+    cp ${./reset_token.rake} $out/share/gitlab/lib/tasks/reset_token.rake
  '';

  passthru = {