DragonFly bugs List (threaded) for 2009-05
DragonFly BSD
DragonFly bugs List (threaded) for 2009-05
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: Unlinking objects in a directory with sticky bit set


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Sun, 3 May 2009 23:24:25 -0700 (PDT)

    The problem is even worse.  rename() doesn't check directory perms
    at all for the source directory on a HAMMER filesystem (because HAMMER
    depends on the kernel to make the checks and doesn't do them itself).
    I blew it.

    That's a huge gaping security hole so we are going to have to
    roll a 2.2.2 this week to correct it.

					-Matt
					Matthew Dillon 
					<dillon@backplane.com>



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]