From: Paul Eggert <eggert@cs.ucla.edu>
Date: Wed, 21 Nov 2012 02:10:21 +0000 (-0800)
Subject: install: fix security race
X-Git-Tag: v8.21~83
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=177815716eef942ec3a4364827195fbdcf6f080f;p=thirdparty%2Fcoreutils.git

install: fix security race

* NEWS: Document this.
---

diff --git a/NEWS b/NEWS
index 713f761e81..15fddd4902 100644
--- a/NEWS
+++ b/NEWS
@@ -14,6 +14,9 @@ GNU coreutils NEWS                                    -*- outline -*-
   Instead, cut now fails and emits an appropriate diagnostic.
   [This bug was present in "the beginning".]
 
+  install -m M SOURCE DEST no longer has a race condition where DEST's
+  permissions are temporarily derived from SOURCE instead of from M.
+
   pr -n no longer crashes when passed values >= 32.  Also line numbers are
   consistently padded with spaces, rather than with zeros for certain widths.
   [bug introduced in TEXTUTILS-1_22i]