On Sun, 1 Nov 2009 12:10:43 +
Neil Williams wrote:
> A simple check appears sufficient, from outside the chroot, prior to
> unpacking:
>
> #!/usr/bin/perl
> $dir = "/path/to/top/of/chroot/"
>
> if (-l "${dir}lib64" ) {
> $r = readlink "${dir}lib64";
> if ($r =~ m:^/:)
> {
"Packages with absolute symlinks to dirs like libc6 on amd64, ppc64 and
s390x can lead to overwrites of files outside of the new root."
dpkg also suffers the same problem on 'dpkg -e' (#514702)
and therefore multistrap too:
n...@holly:debootstrap$ ls -lh multistrap/test/lib64
lrwxrwxrwx 1 root r
2 matches
Mail list logo