https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222258
Jilles Tjoelker <jil...@freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|New |Open
CC| |jil...@freebsd.org
--- Comment #6 from Jilles Tjoelker <jil...@freebsd.org> ---
(In reply to Ed Maste from comment #5)
The block of code checking for CAP_UNLINKAT should not apply when an absolute
path was originally passed to the system call. This is needed to maintain
POSIX's requirement that renameat() be equivalent to rename() unless either old
or new specifies a relative path. I don't immediately know how to code this
best.
The patch from Conrad Meyer seems wrong since capabilities are supposed to be
enforced for all processes, not only ones in capability mode. This feature may
be useful when passing file descriptors to a process with a lower privilege
level.
In any case, this seems a valid bug.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
