Note that the fix has a TOCTOU race that allows it to still follow
links:
```
if !dest.is_symlink() {
fs::set_permissions(dest, dest_permissions).ok();
}
```
That corresponds to a call to statx, S_ISLNK, and then chmod.
I suppose it works as a hack to fix images, but that ought to be fixed.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2165041
Title:
Missing setuid flag in su and sudo
To manage notifications about this bug go to:
https://bugs.launchpad.net/rust-coreutils/+bug/2165041/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
