[Rpm-maint] [rpm-software-management/rpm] First steps towards fixing the symlink CVEs (PR #1919)

[Panu Matilainen]

@pmatilai pushed 12 commits.

0c03be9f3b1f97d2c94be66acb1653f37d51f65f  Extend directory tracking to our entire operation
835e588f2c8e52babe10ea66d6c32fec7b9c8f6d  Convert fsmStat() to fstatat() based operation
b05c0894bc979ce2b8d7d032edaea300749eeca2  Convert fsmRemove() and helpers to unlinkat() based operation
456e76d0bd6182b7fd582cb650847dd1fc22b2bb  Convert fsmRename() to renameat() based operation
4ab8753dff519eb6332a37ab6154149b0df7393d  Bury rpmio FD use to fsmUnpack()
6d52716d8d04e6795585799d763ba4858ac443ce  Return descriptor of created file from fsmMkfile()
012986deb163a95930ce6125dcad42b9377f114a  Convert fsmSetmeta() to dirfd based operation where possible
1385fb3c99a885823314c22ff782a97c93c3cf9b  Add support for fd-based file metadata setting
3a4699193f3dfd6bf73df5dba666bb77e97e8664  Set file metadata via fd-based ops for everything but symlinks
4d8a828523f90361e4157b6560e87f815f5a8a9e  Convert removeSBITS() to dirfd-based operation
b3d32dada475aad3d9c9a7a281979902af79a1c4  Parent directory needs to be open before we can back up stuff
008cbca34e97beac95788cf688b7690f2707601b  Add fsm debug logging to ensureDir()


-- 
View it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1919/files/da3507bb609cd41097278ced592b449050fef00f..008cbca34e97beac95788cf688b7690f2707601b
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/1919/push/9104649549 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220214/be74b737/attachment-0001.html>