[buildd-tools-devel] Bug#605939: Bug#605939: Bug#605939: Bug#605939: Regression: Chroots with periods in the name no longer work.
Zach Carter
z.carter at f5.com
Mon Dec 6 17:28:39 UTC 2010
On Sunday 05 December 2010 13:25:57 Roger Leigh wrote:
> Can anyone see any downside from being this permissive, or any
> security implication I've not seen? (I'm only looking at pathname-
> based security exploits here--is there anything else we need to
> worry about?)
Like lvm, it might be wise to check that btrfs supports the various allowed
characters. I saw one reference to an old btrfs man page that disallows both
types of slashes, however the current man page does not mention the
restriction.
I don't have time at the moment, but I can try to test some scenarios some
time later this week.
-Zach
More information about the Buildd-tools-devel
mailing list