summaryrefslogtreecommitdiff
path: root/internal/nametransform/dirivcache
diff options
context:
space:
mode:
authorJakob Unterwurzacher2017-11-26 21:59:24 +0100
committerJakob Unterwurzacher2017-11-27 21:04:45 +0100
commit72b975867a3b9bdf53fc2da62e2ba4a328d7e4ab (patch)
tree8282cffdf1361228827851ca62f40589b4bb4a55 /internal/nametransform/dirivcache
parent1bb47b6796c7a2cfb64e6cdff37c43c03c473a81 (diff)
fusefronted: allow_other: close race between mknod and chown
If the user manages to replace the directory with a symlink at just the right time, we could be tricked into chown'ing the wrong file. This change fixes the race by using fchownat, which unfortunately is not available on darwin, hence a compat wrapper is added. Scenario, as described by @slackner at https://github.com/rfjakob/gocryptfs/issues/177 : 1. Create a forward mount point with `plaintextnames` enabled 2. Mount as root user with `allow_other` 3. For testing purposes create a file `/tmp/file_owned_by_root` which is owned by the root user 4. As a regular user run inside of the GoCryptFS mount: ``` mkdir tempdir mknod tempdir/file_owned_by_root p & mv tempdir tempdir2 ln -s /tmp tempdir ``` When the steps are done fast enough and in the right order (run in a loop!), the device file will be created in `tempdir`, but the `lchown` will be executed by following the symlink. As a result, the ownership of the file located at `/tmp/file_owned_by_root` will be changed.
Diffstat (limited to 'internal/nametransform/dirivcache')
0 files changed, 0 insertions, 0 deletions