Date: Thu, 24 Feb 2005 18:00:46 GMT From: Johannes Weiner <hnaz@buetow.org> To: freebsd-gnats-submit@FreeBSD.org Subject: misc/78036: CVSUP ignores chflags Message-ID: <200502241800.j1OI0k6d072480@www.freebsd.org> Resent-Message-ID: <200502241810.j1OIAIXI088173@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 78036 >Category: misc >Synopsis: CVSUP ignores chflags >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Feb 24 18:10:18 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Johannes Weiner >Release: 5.3-STABLE >Organization: >Environment: FreeBSD paranoise 5.3-STABLE FreeBSD 5.3-STABLE #2: Tue Feb 22 23:09:46 CET 2005 root@paranoise:/usr/src/sys/i386/compile/PARANOISE i386 >Description: CVSUP seems to ignore file chflags. I set a schg flag on a file to protect from being updated by cvsup, but the file still gets updated. I'm aware of the refuse system for cvsup now, but I think this is a security bug anyway. [Bossmc can confirm and reproduce this also] >How-To-Repeat: echo foo > /usr/src/sys/bar chflags schg /usr/src/sys/bar then run cvsup for src-all with option 'delete' and /usr/src/sys/bar will be deleted. >Fix: >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200502241800.j1OI0k6d072480>