Just '/group' was to restrictive (e.g. breaks StatusNet)

diff --git a/libs/lib_detector.php b/libs/lib_detector.php
index 44d1818eaf3138643cca8840ef30156e933ff495..e07fa7b430c53da56513884dddff3b2f7ea77346 100644 (file)
--- a/libs/lib_detector.php
+++ b/libs/lib_detector.php
@@ -53,8 +53,10 @@ function initCrackerTrackerArrays () {
                'DOCUMENT_ROOT', '_SERVER',
 
                // Sensitive files
-               '/environ', '/shadow', '/gshadow', '/passwd', '/group', '.htaccess',
-               '.htpasswd', '.htgroup', '.history', 'bash_history', 'bashrc',
+               '/environ', 'etc/shadow', 'etc/gshadow', 'etc/passwd', 'etc/group',
+               'etc/./shadow', 'etc/./gshadow', 'etc/./passwd', 'etc/./group',
+               '.htaccess', '.htpasswd', '.htgroup', '.history', 'bash_history',
+               'bashrc',
 
                // Other Linux/FreeBSD/??? programs (sometimes with space)
                'traceroute%20', 'ping%20', 'bin/xterm', 'bin/./xterm', 'lsof%20',