Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

[Vincent Danjean <vdanjean.ml@free.fr>]

Brian May wrote:
> Ivan Jager wrote:
>> qemu-make-debian-root will continue running even if mkdir failed.
> Dmitry said the script has -e set - if so the script will not continue
> running if mkdir failed (unless it somehow overrides the -e check, e.g.
> mkdir /tmp/file || true).

You must take care to sub shell, too. For example, try to type this in bash:
( set -e ; ( false ) ; echo ok )
You will see the 'ok'...
Situation can be more complex (function called from a sub shell, ...)

  Regards,
    Vincent

-- 
Vincent Danjean       GPG key ID 0x9D025E87         vdanjean@debian.org
GPG key fingerprint: FC95 08A6 854D DB48 4B9A  8A94 0BF7 7867 9D02 5E87
Unofficial pacakges: http://www-id.imag.fr/~danjean/deb.html#package
APT repo:  deb http://perso.debian.org/~vdanjean/debian unstable main