[Bug 248335] O_BENEATH leaks information about parent directories

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248335

Konstantin Belousov <kib at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |emaste at freebsd.org

--- Comment #1 from Konstantin Belousov <kib at FreeBSD.org> ---
I am not convinced that the discovered oracle is useful for anything.  It can
only answer the question 'is given dirfd has such upper full path'.  So what ?

But even that, I do not see how it prevents code from opening and listing
arbitrary  directories by not using O_BENEATH, since you are not in the cap
mode.

I would prefer to see some (potential) real-world application of O_BENEATH that
is damaged by the behavior, before making any decision.

-- 
You are receiving this mail because:
You are the assignee for the bug.