[pulseaudio-tickets] [Bug 45656] lacks handling of (not-so-)special cases in pa_make_secure_dir()

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=45656

--- Comment #13 from Arun Raghavan <arun at accosted.net> ---
This came up on IRC again, and henrk pointed out this old bug that explains why
we might want to keep O_NOFOLLOW:

  https://web.archive.org/web/20101129201521/http://pulseaudio.org/ticket/662

So we have two choices, I think -- continue to not allow symlinks and close
this out, or have throw out a message about possibly opening up your PA for
access by any user if the directory is a symlink.

Thoughts?

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/pulseaudio-bugs/attachments/20170607/1dce7abc/attachment.html>