Re: open()ing a directory without O_DIRECTORY
[email protected] (Christos Zoulas) Sat, 2 Mar 2019 14:50:57 -0000 (UTC)
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
In article <[email protected]>, Aymeric Vincent <[email protected]> wrote: > >There is no trivial way to get rid of this no longer valid contents, >since for good reason you can't write to a directory as a file. You have >to re-create it (not always possible due to permissions) or create long >entries until your data disappears... :-/ Why? The kernel can just zero out the deleted dirents. Yes, users can't and should not write to directories, if you want to avoid the data disclosure fix it in the kernel! christos