diff options
| author | William Hubbs <w.d.hubbs@gmail.com> | 2015-02-15 14:56:07 -0600 |
|---|---|---|
| committer | William Hubbs <w.d.hubbs@gmail.com> | 2015-02-15 16:04:43 -0600 |
| commit | b17af3c85fc94ecc12857146ba2133a3782ead52 (patch) | |
| tree | 85e041357bee8241999d72715eac17dbe876037b /README.busybox | |
| parent | 3100114bc104741145fb6c1d4b1664759114cc5c (diff) | |
checkpath: security fix for -m and -o options
Do not change permissions on the target if it is a file and has multiple
hard links. This is necessary because a hard link can be an attack
vector to gain privilege escalation.
X-Gentoo-Bug: 540006
X-Gentoo-Bug-URL: https://bugs.gentoo.org/show_bug.cgi?id=540006
Diffstat (limited to 'README.busybox')
0 files changed, 0 insertions, 0 deletions