Package: acl
Version: 2.2.29-1.0.1
Severity: normal

Hi,

here is a sequence of commands that demonstrates this problem:


$ mkdir foo
$ ln -s /proc/ foo/
$ setfacl -R -m u:root:rX foo/
[many error message (permission denied) about files in /proc]

However, when I read this in the manpage:

       -L, --logical
           Logical walk, follow symbolic links. The default behavior is to 
follow symbolic link argu-
           ments, and to skip symbolic links encountered in subdirectories.  
This  option  cannot  be
           mixed with `--restore'.

I understand that:

 - "setfacl -R -m u:root:rX foo/proc" would recurse in foo/proc

 - "setfacl -R -m u:root:rX foo/" would not recurse in foo/proc

This bug almost deserves a "grave" severity because it sets ACL for
many unexpected files, which may create a security hole.  I solved my
problem by removing all ACL, but it would not have been possible if
the filesystem already had ACL.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (100, 'unstable'), (99, 'experimental'), (98, 'breezy')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-1-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages acl depends on:
ii  libacl1                     2.2.29-1.0.1 Access control list shared library
ii  libattr1                    2.4.21-1.0.1 Extended attribute shared library
ii  libc6                       2.3.5-6      GNU C Library: Shared libraries an

acl recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to