On 3/27/10 1:47 AM, Johan Hattne wrote:

> Bash Version: 4.1
> Patch Level: 2
> Release Status: release
> 
> Description:
>   The bash built-in test command fails to correctly report executable
>   status for non-executable files when run by root on FreeBSD.  On
>   FreeBSD, bash calls eaccess(2) to find the executable status, but
>   according to the man page "even if a process's real or effective user
>   has appropriate privileges and indicates success for X_OK, the file may
>   not actually have execute permission bits set". The attached patch is
>   based on source from FreeBSD's stand-alone test,
>   http://www.freebsd.org/cgi/cvsweb.cgi/src/bin/test/test.c.

So now we can trust access/eaccess when they fail, but not when they report
success.  Why do designers keep stuffing things like ACL checks into
eaccess, requiring its use?  What a fundamentally flawed design.

Chet

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    c...@case.edu    http://cnswww.cns.cwru.edu/~chet/


Reply via email to