[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-cpio] [PATCH] symlink target sanity check to prevent --no-absol

From: Cedric Buissart
Subject: Re: [Bug-cpio] [PATCH] symlink target sanity check to prevent --no-absolute-filenames bypass
Date: Thu, 15 Jun 2017 21:37:13 +0200

Attempt n.2 :
Created a function that walks the whole path. If anything not-directory is found, return an error. If the path is not fully created, we consider that a success and let cpio decides when time has come.
Files will be skipped if no-absolute-path is set and error is return.

On Wed, Jun 7, 2017 at 10:46 AM, Pavel Raiskup <address@hidden> wrote:
On Wednesday, June 7, 2017 10:07:21 AM CEST Cedric Buissart wrote:
> > In other words and IMO, if we were about to fix this issue - we should only
> > refuse to extract files through symlinks.
> Through any symlinks, or only those created by the archive itself ?

Remembering the extracted links might be expensive, and with
--no-absolute-filenames we want to stay in CWD anyway - no matter how the links
in CWD were created.

> The latter might look less restrictive, but what happens if a local
> attacker is able to create a symlink. Is it something that should be
> considered ?

Usually user should avoid races manually when running archiver:
based on the above, I did not try to avoid races.


Cedric Buissart,
Product Security

Attachment: prevent-symlink-follow.patch
Description: Text Data

reply via email to

[Prev in Thread] Current Thread [Next in Thread]