efiboot refresh: check --hook parameter

against list of default hook scripts.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

diff --git a/bin/pve-efiboot-tool b/bin/pve-efiboot-tool
index d9bb8299022a94a6bbc028cbafd44a0183676c23..97015f31998eb6d72b6aa5ced83bf81b8494d138 100755 (executable)
--- a/bin/pve-efiboot-tool
+++ b/bin/pve-efiboot-tool
@@ -195,9 +195,16 @@ clean() {
 }
 
 refresh() {
-       hookscripts="$1"
-       if [ -z "$hookscripts" ]; then
-               hookscripts='pve-auto-removal zz-pve-efiboot'
+       hook=$1
+       hookscripts='pve-auto-removal zz-pve-efiboot'
+
+       if [ -n "$hook" ]; then
+           if echo "$hookscripts" | grep -sqE "(^|[[:space:]]+)$hook([[:space:]]+|$)"; then
+               hookscripts="$hook"
+           else
+               warn "E: '$hook' is not a valid hook script name.";
+               exit 1;
+           fi
        fi
 
        for script in $hookscripts; do