Subject: Re: CVS commit: src/usr.bin/find
To: Perry E. Metzger <perry@piermont.com>
From: SODA Noriyuki <soda@sra.co.jp>
List: tech-userlevel
Date: 02/09/2007 03:32:04
>>>>> On Thu, 08 Feb 2007 13:00:14 -0500,
"Perry E. Metzger" <perry@piermont.com> said:
> It is close enough and I'd rather fix things than get into a situation
> where we argue about whether the option is ever coming back again.
The problems are:
i. The consensus for the necessity of the -rm option is not yet made.
Certain people are objecting the -rm option.
ii. If the consensus is "no", having -rm option in the tree causes
incompatible change (i.e. removing a feature that people may already
depend on it.)
iii. Even if the consensus is "yes", there is still security risk below.
On the other hand, removing "-rm" for now harms nothing.
>> As far as I can tell, removing the "-rm" option harms nothing.
>> On the other hand, leaving the current "-rm" option introduces
>> security problem as I said.
> How oes the rm option introduce a security problem?
People may depend on the fact that current "-rm" implementation is
secure against the symlink race.
And introduction of the correct "-rm" implementation may break
the people's assumption. That's a security risk.
--
soda