[debbugs-tracker] bug#24604: closed (Add '--no-preserve-roots' flag to 'rm' for better safety)

[GNU bug Tracking System]

Your message dated Tue, 4 Oct 2016 23:41:31 +0100
with message-id <address@hidden>
and subject line Re: bug#24604: Add '--no-preserve-roots' flag to 'rm' for 
better safety
has caused the debbugs.gnu.org bug report #24604,
regarding Add '--no-preserve-roots' flag to 'rm' for better safety
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden)


-- 
24604: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=24604
GNU Bug Tracking System
Contact address@hidden with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> Add '--no-preserve-roots' flag to 'rm' for better safety
>
>
>
>
> Date: 
>
> Tue, 4 Oct 2016 07:51:08 +0530
>
>
>
>
> '--no-preserve-root' that can be used to ignore if the path is root when using
> the 'rm' command.
>
> But as the most of the GNU commands accepts shortened flag as long as
> there is no ambiguity, this can be an issue too. So, 'rm --n' may have the
> same effect as 'rm --no-preserve-root'. There may be several users unaware
> of this feature which can cause several issues.
>
> 1. A cracker may be able to trick a user to bring a system down using
> '--n' flag.
> 2. A folder/file name like '--n' as an argument to 'rm' command may
> try to delete
>     the whole files (in case a '/' too appears as an argument), and
> the user won't
>     find a reason why it happened.
>
> One way to overcome this is set '--no-preserve-roots' too an alias for
> '--no-preserve-root'. This means that the user will have include the whole flag
> to ignore root check (shortening will create an ambiguity).
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Re: bug#24604: Add '--no-preserve-roots' flag to 'rm' for better safety
>
>
>
>
> Date: 
>
> Tue, 4 Oct 2016 23:41:31 +0100
>
>
>
>
> User-agent: 
>
> Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
>
>
>
>
> http://git.sv.gnu.org/gitweb/?p=coreutils.git;a=commitdiff;h=v8.25-74-g0e060d9
>
>
> --- End Message ---