]> git.ipfire.org Git - thirdparty/coreutils.git/commit
doc: warn about following symlinks recursively in chown/chgrp
authorMichael Orlitzky <michael@orlitzky.com>
Thu, 4 Jan 2018 16:38:21 +0000 (11:38 -0500)
committerBernhard Voelker <mail@bernhard-voelker.de>
Wed, 10 Jan 2018 07:45:24 +0000 (08:45 +0100)
commitbc2fd9796403e03bb757b064d44c22fab92e6842
treec20f26add739fd2ead374ff6c7abfbbf3a20471f
parentb88f8d1101d7e4afd20314dc60bff155c9f7db1f
doc: warn about following symlinks recursively in chown/chgrp

In both chown and chgrp (which shares its code with chown), operating
on symlinks recursively has a window of vulnerability where the
destination user or group can change the target of the operation.
Warn about combining the --dereference, --recursive, and -L flags.

* doc/coreutils.texi (warnOptDerefWithRec): Add macro.
(node chown invocation): Add it to --dereference and -L.
(node chgrp invocation): Likewise.

See also: CVE-2017-18018
doc/coreutils.texi