tag 487319 confirmed forwarded 487319 http://rt.cpan.org/Public/Bug/Display.html?id=36982 retitle 487319 perl-modules: File::Path::rmtree sets symlink target permissions to 0777 thanks
On Sat, Jun 21, 2008 at 02:47:14AM +0100, Ben Hutchings wrote: > touch foo # permissions 0666 & ~umask > ln -s foo bar > perl -e 'use File::Path rmtree; rmtree bar' > ls -l foo # permissions 0777 > > The following patch fixes that and the originally reported problem. I > believe the other chmod() calls in the _rmtree subroutine will never be > applied to a sym-link if either (1) no concurrent modifications of the > directory tree or (2) the 'safe' option is used. It would be worthwhile > for someone else to double-check that, though. Thanks, Ben. I just forwarded this to [rt.cpan.org #36982] and sent a notice to the perl5-porters list too. I'm pretty short on time this weekend; an NMU would be welcome if somebody feels sure enough the patch is sufficient. I don't think the 'safe' option should really affect this at all. Even without 'safe', the chmod shouldn't follow symlinks. Retitling back. Brendan, please speak up if you want to handle this yourself instead. Cc'ing the security team. -- Niko Tyni [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]