Date: Wed, 29 Jul 2020 19:13:15 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 248335] O_BENEATH leaks information about parent directories Message-ID: <bug-248335-227-jD9qZzOTOM@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-248335-227@https.bugs.freebsd.org/bugzilla/> References: <bug-248335-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D248335 Konstantin Belousov <kib@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |emaste@freebsd.org --- Comment #1 from Konstantin Belousov <kib@FreeBSD.org> --- I am not convinced that the discovered oracle is useful for anything. It c= an only answer the question 'is given dirfd has such upper full path'. So wha= t ? But even that, I do not see how it prevents code from opening and listing arbitrary directories by not using O_BENEATH, since you are not in the cap mode. I would prefer to see some (potential) real-world application of O_BENEATH = that is damaged by the behavior, before making any decision. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-248335-227-jD9qZzOTOM>