Re: Bug in tar? (was Re: world writable /usr/lib/libguile.so.6.0.0)
On Tue, Nov 23, 1999 at 09:35:45AM -0500, Raul Miller wrote:
> On Mon, Nov 22, 1999 at 06:48:12PM +0000, Ben Collins wrote:
> > There is a hardlink created after libguile.so.6.0.0 is installed:
> >
> > [buildd@xia03(11:38am)-~/<1>failed/wxxt-1.67c]%dpkg -c /Debian/debian/dists/potato/main/binary-sparc/*/libguile6_*.deb | grep libguile.so
> > -rw-r--r-- root/root 578636 1999-11-16 22:50:02 ./usr/lib/libguile.so.6.0.0
> > lrwxrwxrwx root/root 0 1999-11-16 22:49:54 ./usr/lib/libguile.so.6 -> libguile.so.6.0.0
> > -rwxrwxrwx root/root 0 1999-11-16 22:49:54 ./usr/lib/libguile.so.3 link to ./usr/lib/libguile.so.6
>
> This looks like a bug in tar.
>
> In principle, hard links use the same inode as the existing file, and
> permissions are stored in the inode.
>
> Is there any reason for tar to be using different semantics here?
I think you are missing the problem. This is a hard link to a symlink.
IMO, this is a bad situation either way.
--
-----------=======-=-======-=========-----------=====------------=-=------
/ Ben Collins -- ...on that fantastic voyage... -- Debian GNU/Linux \
` bcollins@debian.org - collinbm@djj.state.va.us - bmc@visi.net '
`---=========------=======-------------=-=-----=-===-======-------=--=---'
Reply to: