tag 487319 confirmed
forwarded 487319 http://rt.cpan.org/Public/Bug/Display.html?id=36982
retitle 487319 perl-modules: File::Path::rmtree sets symlink target permissions 
to 0777
thanks

On Sat, Jun 21, 2008 at 02:47:14AM +0100, Ben Hutchings wrote:

> touch foo  # permissions 0666 & ~umask
> ln -s foo bar
> perl -e 'use File::Path rmtree; rmtree bar'
> ls -l foo  # permissions 0777
> 
> The following patch fixes that and the originally reported problem.  I
> believe the other chmod() calls in the _rmtree subroutine will never be
> applied to a sym-link if either (1) no concurrent modifications of the
> directory tree or (2) the 'safe' option is used.  It would be worthwhile
> for someone else to double-check that, though.

Thanks, Ben.

I just forwarded this to [rt.cpan.org #36982] and sent a notice to the
perl5-porters list too. I'm pretty short on time this weekend; an NMU
would be welcome if somebody feels sure enough the patch is sufficient.

I don't think the 'safe' option should really affect this at all. Even
without 'safe', the chmod shouldn't follow symlinks. Retitling back.

Brendan, please speak up if you want to handle this yourself instead.

Cc'ing the security team.
-- 
Niko Tyni   [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to