[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#555979: debian-policy: Symlinks pointing beyond the root of the file system



Control: tags -1 + patch

On Thu, Nov 12, 2009 at 04:31:52PM -0800, Russ Allbery wrote:
> Lintian has a tag:
> 
> Tag: symlink-has-too-many-up-segments
> Severity: serious
> Certainty: certain
> Ref: policy 10.5
> Info: The symlink references a directory beyond the root directory "/".
> 
> for symlinks that contain so many ../ segments that they traverse above
> the root of the file system.  This tag is currently used by ftpmaster to
> reject uploads, but this behavior is not explicitly prohibited by Policy
> (although it violates both shoulds in 10.5).

Here is a patch:

diff --git a/policy.sgml b/policy.sgml
index 6eac491..a582f60 100644
--- a/policy.sgml
+++ b/policy.sgml
@@ -8892,6 +8892,7 @@ fname () {
            would point to <file>/srv/run</file> rather than the intended
            target.
          </footnote>
+         Symbolic links must not traverse above the root directory.
        </p>
 
        <p>



-- 
WBR, wRAR

Attachment: signature.asc
Description: Digital signature


Reply to: