bugtraq - Re: Changes to the filesystem while find is running

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20041122182354.GA32470@compsoc.man.ac.uk>
Date: Mon, 22 Nov 2004 18:23:54 +0000
From: John Levon <levon@...ementarian.org>
To: Martin Buchholz <Martin.Buchholz@....COM>
Cc: bug-findutils@....org, parimiv@...haw.com, srevilak@...akeasy.net,
	bugtraq@...urityfocus.com,
	James Youngman <bugtraq@...ession.spiral-arm.org>
Subject: Re: Changes to the filesystem while find is running - comments?

On Mon, Nov 22, 2004 at 10:05:04AM -0800, Martin Buchholz wrote:

> The guarantee `find' makes that symlinks are not followed is
> an important one, for the sanity of users, especially sysadmins.

With -exec, it's not very useful since any -exec action necessarily
is passed the full path, leaving that script open to the race again.

As James pointed out before, something like FreeBSD's -execdir option is
really necessary (fchdir() into the directory before -exec).

regards
john