CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/30 02:53:23
Modified files:
usr.bin/ssh : sftp-client.c
Log message:
when uploading/crossloading, prefer to use LSETSTAT as it makes it more
difficult for a local attacker on the destination play tricks where
they replace paths around the time where the client is restoring
permissions on things.
Also skip setting permissions entirely when its not necessary to do so.
Anthropic ANT-2026-Y4XK22QX
