>>>>> On Tue, 30 Jan 2024 19:09:45 +0100, Sergey Poznyakoff said:
> 
> > I suggest that tar check if a file exists before trying to make a
> > network connection. This would eliminate the need for --force-local in
> > (I expect) most cases. As in:
> 
> Nice idea.  I'll implement it.

Is there a potential security risk where someone could create that file
in the cwd of an important tar command and then capture/control the tar
file contents?

__Martin

Reply via email to