bug-coreutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#43415: coreutils 8.32: install: fchmod fails with EBADF


From: Paul Eggert
Subject: bug#43415: coreutils 8.32: install: fchmod fails with EBADF
Date: Tue, 15 Sep 2020 16:49:04 -0700
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0

On 9/14/20 6:31 PM, Cameron Nemo via GNU coreutils Bug Reports wrote:
It seems like relying on the /proc link is not ideal,
and a bug is being hidden by such behavior.
Is there any chance that this can be resolved?

It really should be fixed in the Linux kernel: it needs a proper way to implement POSIX fchmodat <https://pubs.opengroup.org/onlinepubs/9699919799/> with the AT_SYMLINK_NOFOLLOW flag, in order to plug some security holes involving symlink attacks. See:

https://bugzilla.redhat.com/show_bug.cgi?id=1810141
https://lkml.org/lkml/2020/6/9/548

In the meantime, mounting /proc may be your best bet. I vaguely recall there are other places in glibc that assume /proc.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]