https://sourceware.org/bugzilla/show_bug.cgi?id=30962
Bug ID: 30962
Summary: ensure x-debuginfod-file / -archive headers always
return full path names
Product: elfutils
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: debuginfod
Assignee: unassigned at sourceware dot org
Reporter: fche at redhat dot com
CC: elfutils-devel at sourceware dot org
Target Milestone: ---
We kind of decided haphazardly to `basename` some of those strings and not
others. This was partly with some halfbaked notion of security in mind, to
avoid exposing path names on a server.
We should switch to full path names: basically just return everything in its
raw form: file names, archive names, names-from-archives. This would simplify
things, and making naming consistent between x-debuginfod-file: BASENAME and
the forthcoming metadata-query FULLPATH. And we can document how to strip
sensitive prefixes if admins want to keep things hush-hush.
--
You are receiving this mail because:
You are on the CC list for the bug.
