[Bug 224556] pw(8) does not check semantics of name

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Jan 15 19:32:03 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=224556

Eugene Grosbein <eugen at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|In Progress                 |Open
           Assignee|freebsd-bugs at FreeBSD.org    |eugen at freebsd.org
                 CC|                            |eugen at freebsd.org

--- Comment #4 from Eugene Grosbein <eugen at freebsd.org> ---
In fact, pw(8) already has needed checks and does not harm.

First, "/path/to/dir/." is completely correct directory name and the same as
"/path/to/dir" itself and "pw userdel username -r" removes it if its owner is
user being removed only.

Second, "/path/to/dir/.." may look funny but it is correct directory name too
and the same as "/path/to" and "pw userdel username -r" removes it if its owner
is user being removed only.

What is the problem is exactly? If you believe that pw(8) does "rm -rf" for
file system objects not checking their ownership, you are wrong.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list