Hacker News new | ask | show | jobs
by tinus_hn 977 days ago
How does that solve the problem of links pointing places where you don’t expect them to, or any of the other issues in this article?

The problem here is trying to cross a security boundary where your only tool is shell scripting. That’s just basically impossible to do securely.

Use a real programming language, follow the rules required to make it secure and do all the checks you need to.

1 comments

It would solve it by disallowing changing of the underlying path from a symlink to a file (and vice versa) while a transaction to do a `chown` is still underway.

Though that would require much more than just ACID semantics but also proper user / jail isolation.