]> git.ipfire.org Git - thirdparty/shadow.git/commit
Avoid races in remove_tree()
authorChristian Göttsche <cgzones@googlemail.com>
Fri, 5 Aug 2022 15:57:22 +0000 (17:57 +0200)
committerSerge Hallyn <serge@hallyn.com>
Wed, 17 Aug 2022 17:34:01 +0000 (12:34 -0500)
commitf6f8bcd2a57c06983296485cc028ebdf467ebfd7
treebc77ba08191c3762e78b666502534938f54fbe43
parente9ae247cb14f977d8881f481488843b10665dba8
Avoid races in remove_tree()

Use *at() functions to pin the directory operating in to avoid being
redirected by unprivileged users replacing parts of paths by symlinks to
privileged files.
libmisc/remove_tree.c