Re: dynamic /dev security hole?

Eric Lammerts
2004-08-09T17:04:57Z

On Mon, 9 Aug 2004, Michael Buesch wrote:
> So what about this updated patch?

> dbg("unlinking symlink '%s'", filename);
> - - retval = unlink(filename);
> - - if (errno == ENOENT)
> - - retval = 0;
> - - if (retval) {
> - - dbg("unlink(%s) failed with error '%s'",
> - - filename, strerror(errno));
> + retval = secure_unlink(filename);

Better not do it for symlinks.

Eric