GNU bug report logs - #21534
Bug in mkdir?!

Previous Next

Package: coreutils;

Reported by: Sebastian Unger <sebunger44 <at> gmail.com>

Date: Tue, 22 Sep 2015 17:27:01 UTC

Severity: normal

Done: Paul Eggert <eggert <at> cs.ucla.edu>

Bug is archived. No further changes may be made.

Full log

Message #10 received at 21534-done <at> debbugs.gnu.org (full text, mbox):

From: Paul Eggert <eggert <at> cs.ucla.edu>
To: Sebastian Unger <sebunger44 <at> gmail.com>, 21534-done <at> debbugs.gnu.org
Subject: Re: bug#21534: Bug in mkdir?!
Date: Tue, 22 Sep 2015 20:09:35 -0700

[Message part 1 (text/plain, inline)]
Sebastian Unger wrote:
> Why is it trying to open the directory
> in the first place?

Security.

Apparently POSIX doesn't allow this level of paranoia for mkdir -p, so I removed 
it in the attached Gnulib patch, and this should appear in the next coreutils 
release.

A filesystem that doesn't let you read your own directory that you just created 
is likely to run into other problems like this -- i.e., the practice may 
introduce more security problems than it closes.  But I digress.

[0001-savewd-remove-SAVEWD_CHDIR_READABLE.patch (text/plain, attachment)]
This bug report was last modified 9 years and 299 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.