HEADS UP: Re: FreeBSD Security Advisory FreeBSD-SA-07:01.jail

[Pawel Jakub Dawidek]

On Mon, Jan 15, 2007 at 10:15:26PM +0100, Dirk Engling wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Pawel Jakub Dawidek wrote:
> 
> > In other words, it may break existing configurations.
> 
> Sorry, I meant "pwd -P" and assumed that, according to pwds man page, to
> be default.

Ok, this may work...

> > --> Race <--
> > 
> >> cp -f ${temp_log} console.log
> 
> No, since that directory is your cwd, you operate on ./ which wont
> change by setting soft links along the path. You won't even be able to
> remove that directory in the first place since the directories vnode is
> locked.

console.log can still be a softlink. I don't see option for cp(1) which
allows to not following symlinks, so I'd suggest 'mv -f' instead -
rename(2) doesn't follow symlinks.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20070115/04d1afaa/attachment.pgp