Re: open()ing a directory without O_DIRECTORY

[email protected] (Christos Zoulas) Sat, 2 Mar 2019 14:50:57 -0000 (UTC)
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
In article <[email protected]>,
Aymeric Vincent  <[email protected]> wrote:
>
>There is no trivial way to get rid of this no longer valid contents,
>since for good reason you can't write to a directory as a file. You have
>to re-create it (not always possible due to permissions) or create long
>entries until your data disappears... :-/

Why? The kernel can just zero out the deleted dirents. Yes, users
can't and should not write to directories, if you want to avoid
the data disclosure fix it in the kernel!

christos