Conversation

Notices

1. Embed this notice
   Matthew Garrett (mjg59@nondeterministic.computer)'s status on Thursday, 18-Apr-2024 19:27:14 JST Matthew Garrett

   Amazingly, https://github.com/mjg59/linux/tree/restrict_path_traversal actually seems to roughly work as expected do I attempt to upstream or not

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 18-Apr-2024 19:31:57 JST Haelwenn /элвэн/ :triskell:

     in reply to

     @mjg59 Interesting, that said I'm not sure if this one would have much of an effect as a lot of path resolution works entirely in userspace.
     See the output of strace realpath ../../../../../../etc/passwd for example, so I guess it would also need changes in something like standard libraries.