Christian Göttsche faeab50e71 Avoid races in copy_tree() ...

Use *at() functions to pin the directory operating in to avoid being
redirected by unprivileged users replacing parts of paths by symlinks to
privileged files.

Introduce a path_info struct with the full path and dirfd and name
information for *at() functions, since the full path is needed for link
resolution, SELinux label lookup and ACL attributes.

2022-08-17 12:34:01 -05:00

27 KiB

Raw Blame History

View Raw