Follow-up Comment #3, bug #13381 (project findutils):

Followup - this isn't a denial of updatedb service because updatedb  does not
use -follow or -L.  However, the problem is significant from a security
perspective in other contexts.

Once again, -L should not be used in security-sensitive environments in any
case.

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=13381>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/



_______________________________________________
Bug-findutils mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-findutils

Reply via email to