Hi,

it seems this problem was introduced in 2.2.46, during the tree_walk rewrite
in the acl tools. Upstream has a report for this as well [1].

According to CVS logs [2], this bugs was fixed in upstream CVS two months ago.
However, I do not think another release has happened since then. I'm not sure
about upstream's release plans in this area, but if no release happens soon,
perhaps Debian should include the patch [3] separately?

Since the bug also applies to setfacl, not just getfacl, I would also consider
this bug to be more severe than "normal", probably even a release-critical
regression (due to the security implications of unexpected acl changes).

Gr.

Matthijs

[1]: http://oss.sgi.com/bugzilla/show_bug.cgi?id=790
[2]: http://oss.sgi.com/cgi-bin/cvsweb.cgi/xfs-cmds/acl/libmisc/walk_tree.c
[3]: 
http://oss.sgi.com/cgi-bin/cvsweb.cgi/xfs-cmds/acl/libmisc/walk_tree.c.diff?r1=1.2;r2=1.3

Attachment: signature.asc
Description: Digital signature

Reply via email to