Den sön 13 nov. 2022 06:10Nathan Hartman skrev:
> On Fri, Nov 11, 2022 at 3:58 PM Daniel Shahaf
> wrote:
>
>> Daniel Shahaf wrote on Mon, Oct 31, 2022 at 10:02:14 +:
>> > Vincent Lefevre wrote on Mon, 24 Oct 2022 13:57 +00:00:
>> > > "svn" goes up in the directory hierarchy to look for a .sv
On Fri, Nov 11, 2022 at 3:58 PM Daniel Shahaf
wrote:
> Daniel Shahaf wrote on Mon, Oct 31, 2022 at 10:02:14 +:
> > Vincent Lefevre wrote on Mon, 24 Oct 2022 13:57 +00:00:
> > > "svn" goes up in the directory hierarchy to look for a .svn directory.
> > > The issue is that it doesn't stop at fi
Daniel Shahaf wrote on Mon, Oct 31, 2022 at 10:02:14 +:
> Vincent Lefevre wrote on Mon, 24 Oct 2022 13:57 +00:00:
> > "svn" goes up in the directory hierarchy to look for a .svn directory.
> > The issue is that it doesn't stop at filesystem and/or owner change.
>
> Why should the upwards scan
On 2022-11-06 04:59:19 +0100, Vincent Lefevre wrote:
> I'm also wondering of the consequence of symlinks .svn/entries to
> /path-to-attacked-user/.svn/entries, etc. except for the pristine
> subdirectory, which Mallory creates as world-writable. If the user
> does a "svn up", could this populate th
On 2022-10-31 10:02:14 +, Daniel Shahaf wrote:
> Vincent Lefevre wrote on Mon, 24 Oct 2022 13:57 +00:00:
> > "svn" goes up in the directory hierarchy to look for a .svn directory.
> > The issue is that it doesn't stop at filesystem and/or owner change.
>
> Why should the upwards scan stop at m
Vincent Lefevre wrote on Mon, 24 Oct 2022 13:57 +00:00:
> "svn" goes up in the directory hierarchy to look for a .svn directory.
> The issue is that it doesn't stop at filesystem and/or owner change.
Why should the upwards scan stop at mount points? Because accessing
/home/.svn on a random machin
"svn" goes up in the directory hierarchy to look for a .svn directory.
The issue is that it doesn't stop at filesystem and/or owner change.
This has several consequences:
* A potential security issue, because some .svn directory may be
under control of another user.
* On some machine at my lab
7 matches
Mail list logo
