b6fef599bf
This walks the directory path to the file we are going to manipulate to make sure that when we create the file and change the ownership and permissions we are working on the same file. Also, all non-terminal symbolic links must be owned by root. This will keep a non-root user from making a symbolic link as described in the bug. If root creates the symbolic link, it is assumed to be trusted. On non-linux platforms, we no longer follow non-terminal symbolic links by default. If you need to do that, add the -s option on the checkpath command line, but keep in mind that this is not secure. This fixes #201. |
||
---|---|---|
.. | ||
einfo.3 | ||
Makefile | ||
openrc-init.8 | ||
openrc-run.8 | ||
openrc-shutdown.8 | ||
openrc.8 | ||
rc_config.3 | ||
rc_deptree.3 | ||
rc_find_pids.3 | ||
rc_plugin_hook.3 | ||
rc_runlevel.3 | ||
rc_service.3 | ||
rc_stringlist.3 | ||
rc-service.8 | ||
rc-sstat.8 | ||
rc-status.8 | ||
rc-update.8 | ||
start-stop-daemon.8 | ||
supervise-daemon.8 |