Andreas Kling 8601108e21 Kernel: Implement the same symlink protection as Linux ...

Path resolution will now refuse to follow symlinks in some cases where
you don't own the symlink, or when it's in a sticky world-writable
directory and the link has a different owner than the directory.

The point of all this is to prevent classic TOCTOU bugs in /tmp etc.

Fixes #4934

2021-01-19 20:28:09 +01:00

35 KiB

Raw Blame History

View Raw