Bug#766147: AW: [php-maint] Bug#766147: php5-common: session cleanup can be misused to change modification time of arbitrary files to now when symlink protection not enabled

Von: Ondřej Surý [mailto:ond...@sury.org] On Tue, Oct 21, 2014, at 10:55, Fiedler Roman wrote: Von: Ondřej Surý [mailto:ond...@sury.org] Hi, TL;DR: s/touch -c/touch -c -h/, right? This will fix it for arbitrary symlinks, the only remaining issues would be a) keeping

Bug#766147: AW: [php-maint] Bug#766147: php5-common: session cleanup can be misused to change modification time of arbitrary files to now when symlink protection not enabled

Von: Ondřej Surý [mailto:ond...@sury.org] Hi, TL;DR: s/touch -c/touch -c -h/, right? This will fix it for arbitrary symlinks, the only remaining issues would be a) keeping open a file .. , which will update the parent directory modification time. b) keeping open a file