#833: reject mutable children when *reading* an immutable dirnode
---------------------------+------------------------------------------------
Reporter: warner | Owner:
Type: defect | Status: new
Priority: critical | Milestone: 1.6.0
Component: code-dirnodes | Version: 1.5.0
Keywords: integrity | Launchpad_bug:
---------------------------+------------------------------------------------
Changes (by zooko):
* priority: major => critical
Comment:
To clarify, I think this is a critical security issue because if you
{{{tahoe cp -r $IMM_DIR_NODE ./local}}} and then give {{{$IMM_DIR_NODE}}}
to your friend, and she also {{{tahoe cp -r $IMM_DIR_NODE ./herlocal}}},
then you can be assured that she has all the same stuff that you do, even
if the original creator of the directory that you are copying tries to
trick you so that you and your friend get different results. This is the
"deep" analogue of #491 (URIs do not refer to unique files in Allmydata
Tahoe).
--
Ticket URL: <http://allmydata.org/trac/tahoe/ticket/833#comment:3>
tahoe-lafs <http://allmydata.org>
secure decentralized file storage grid
_______________________________________________
tahoe-dev mailing list
tahoe-dev@allmydata.org
http://allmydata.org/cgi-bin/mailman/listinfo/tahoe-dev
