Project

General

Profile

Actions
Copy link

Bug #9026

closed

Bug #7060: cfengine stops processing a promise on symlinks

cfengine stops processing a promise on symlinks

Added by Benoît PECCATTE over 7 years ago. Updated over 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Alexis Mousset
Category:
System integration
Target version:
4.0.0~rc1
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

When a symbolic link isn't owned by the same user as its tagrget, cfengine stops processing file promises.
This can stop an attack on code where there is a race condition, but in practice, ther should not be race conditions and there is a lot of legitimate systems with links that don't have the same owner as their target.
We should disable this behavior

Actions
Copy link

Also available in: Atom PDF