freebsd-dev/bin
Xin LI 86da4a5eea Correct a security issue introduced in previous commit:
instead of removing the file and issue a warning about
the removal, do not do any operation at all in case -P
is specified when the dinode has hard links.

With -f and -P specified together, we assume that the
user wants rm to overwrite the contents of the file
and remove it (destroy the contents of file but leave
its hard links as is).

The reason of doing it this way is that, in case where
a hard link is created by a malicious user (currently
this is permitted even if the user has no access to the
file).  Losing the link can potentially mean that the
actual owner would lose control completely to the user
who wants to obtain access in a future day.

Discussed with:	Peter Jermey
2006-10-31 02:22:36 +00:00
..
cat Add the new standard EXIT STATUS section where appropriate. 2005-01-16 16:41:59 +00:00
chflags Use .Cm for all key words, not just the ones I added. More in line with 2006-03-10 12:37:19 +00:00
chio Don't specify SRCS= when it can be obtained from PROGS= 2005-01-27 13:25:09 +00:00
chmod Expand contractions. 2005-02-13 23:45:54 +00:00
cp Wording nits. 2006-10-27 08:26:24 +00:00
csh Fix spelling. 2006-03-19 19:10:39 +00:00
date Use strlcpy in place of strncpy + setting the last character NUL. To 2006-08-20 06:31:24 +00:00
dd More inactive maintainers. 2006-07-09 21:47:37 +00:00
df Based on The Open Group Base Specifications Issue 6 IEEE Std 1003.1, our 2006-09-20 20:55:02 +00:00
domainname /*- or .\"- or #- to begin license clauses. 2005-01-10 08:39:26 +00:00
echo Add the new standard EXIT STATUS section where appropriate. 2005-01-16 16:41:59 +00:00
ed while(0); -> while (0) in multiline macro 2006-08-17 23:00:33 +00:00
expr Add the new standard EXIT STATUS section where appropriate. 2005-01-16 16:41:59 +00:00
getfacl Markup fixes. 2006-09-17 17:40:07 +00:00
hostname There is no /etc/rc.network anymore. 2005-04-17 23:22:22 +00:00
kenv -mdoc sweep. 2005-11-17 12:15:23 +00:00
kill Add the new standard EXIT STATUS section where appropriate. 2005-01-16 16:41:59 +00:00
ln Add '-F' option which allows to delete existing empty directories, when 2006-02-14 11:08:05 +00:00
ls Avoid a spurious warning for each whiteout found during "ls -lW". 2006-10-18 10:58:27 +00:00
mkdir Adhere to POSIX: the -m option only applies to the newly created 2006-10-10 20:18:20 +00:00
mv Attempt to complete the userspace integration of POSIX.1e extended ACLs. 2005-09-05 04:36:08 +00:00
pax Markup fixes. 2006-09-17 17:40:07 +00:00
ps Markup fixes. 2006-09-17 17:40:07 +00:00
pwd Sync program's usage() with manpage's SYNOPSIS. 2005-02-09 17:37:39 +00:00
rcp Expand *n't contractions. 2005-02-13 22:25:33 +00:00
realpath Add the new standard EXIT STATUS section where appropriate. 2005-01-16 16:41:59 +00:00
rm Correct a security issue introduced in previous commit: 2006-10-31 02:22:36 +00:00
rmail Remove kludges intended to support src trees with partial obj trees. 2005-06-10 06:12:53 +00:00
rmdir The new name for the DIAGNOSTICS section is EXIT STATUS. 2005-05-31 12:57:44 +00:00
setfacl Markup fixes. 2006-09-17 17:40:07 +00:00
sh Add the POSIX option -p to the jobs builtin command. It prints the PID of the 2006-10-07 16:51:16 +00:00
sleep Fix a comment. 2005-08-07 09:11:38 +00:00
stty Fix: printed output flags (onocr) and (onlret) same as oxtabs 2005-05-26 06:57:57 +00:00
sync /*- or .\"- or #- to begin license clauses. 2005-01-10 08:39:26 +00:00
test Granting the amount of misunderstanding the last change received, 2006-07-31 09:25:20 +00:00
uuidgen Mention that uuidgen(1) generates DCE version 1 UUIDs only 2005-09-07 07:49:21 +00:00
Makefile Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00
Makefile.inc Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00