Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Sep 2017 02:40:56 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 222258] renameat(2) capability error with absolute path names outside of a sandbox
Message-ID:  <bug-222258-8-3BF0go17gr@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-222258-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-222258-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D222258

--- Comment #5 from Ed Maste <emaste@freebsd.org> ---
FWIW the failure comes from the cap_check() in kern_renameat(),
sys/kern/vfs_syscalls.c:3515:

  3509  #ifdef CAPABILITIES
  3510                  if (newfd !=3D AT_FDCWD) {
  3511                          /*
  3512                           * If the target already exists we require
CAP_UNLINKAT
  3513                           * from 'newfd'.
  3514                           */
  3515                          error =3D cap_check(&tond.ni_filecaps.fc_ri=
ghts,
  3516                              cap_rights_init(&rights, CAP_UNLINKAT));
  3517                          if (error !=3D 0)
  3518                                  goto out;
  3519                  }
  3520  #endif

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-222258-8-3BF0go17gr>