Hynek Schlawack <h...@ox.cx> added the comment: > I'm pretty busy right now, please open a ticket for listdir.
done > _rmtree_safe_fd could remove the directory just after the recursive step > using the parent's dirfd. Of course you'd also have to add a rmdir for the > very-tippy-top after the original call in shutil.rmtree too. But this would > prevent the malicious user from even removing empty directories. Okay I looked into it and it seems okay. IIRC, when Martin wrote the code (and I the fwalk version before), there was no known fd-based rmdir function. ---------- _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue4489> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
