Restoring through a symlink can cause a security vulnerability (see
https://cwe.mitre.org/data/definitions/61.html).

__Martin


>>>>> On Mon, 9 Apr 2018 08:58:42 +0200, Radosław Korzeniewski said:
> 
> Hello,
> 
> I have a following setup:
> 
> *ver
> pve-dir Version: 9.0.6 (20 November 2017) x86_64-pc-linux-gnu debian 9.4
> 
> # ls -ld /opt/bacula-devel/archive
> lrwxrwxrwx 1 root root 8 Mar 28 17:03 /opt/bacula-devel/archive -> /archive
> 
> and my /archive is a mounted external storage.
> 
> During restore I've got a following errors:
> 
> Error: mkpath.c:143 /opt/bacula-devel/archive exists but is not a directory.
> Error: create_file.c:223 Could not create
> /opt/bacula-devel/archive/bacula-restores/opt/bacula-devel/bin/bsmtp:
> ERR=No such file or directory
> (...)
> 
> The first error is partially true. Yes it is not a directory, it is a
> symlink. But this symlink points to the directory, so it should be not a
> problem to make a restore here.
> 
> I'm asking you if this behavior is intentional or is it a bug? If it is
> intentional, I'd like to know the reason.
> 
> best regards
> -- 
> Rados�‚aw Korzeniewski
> rados...@korzeniewski.net

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-devel mailing list
Bacula-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-devel

Reply via email to