freebsd-dev/bin
Xin LI 86da4a5eea Correct a security issue introduced in previous commit:
instead of removing the file and issue a warning about
the removal, do not do any operation at all in case -P
is specified when the dinode has hard links.

With -f and -P specified together, we assume that the
user wants rm to overwrite the contents of the file
and remove it (destroy the contents of file but leave
its hard links as is).

The reason of doing it this way is that, in case where
a hard link is created by a malicious user (currently
this is permitted even if the user has no access to the
file).  Losing the link can potentially mean that the
actual owner would lose control completely to the user
who wants to obtain access in a future day.

Discussed with:	Peter Jermey
2006-10-31 02:22:36 +00:00
..
cat
chflags
chio
chmod
cp Wording nits. 2006-10-27 08:26:24 +00:00
csh
date
dd
df Based on The Open Group Base Specifications Issue 6 IEEE Std 1003.1, our 2006-09-20 20:55:02 +00:00
domainname
echo
ed
expr
getfacl Markup fixes. 2006-09-17 17:40:07 +00:00
hostname
kenv
kill
ln
ls Avoid a spurious warning for each whiteout found during "ls -lW". 2006-10-18 10:58:27 +00:00
mkdir Adhere to POSIX: the -m option only applies to the newly created 2006-10-10 20:18:20 +00:00
mv
pax Markup fixes. 2006-09-17 17:40:07 +00:00
ps Markup fixes. 2006-09-17 17:40:07 +00:00
pwd
rcp
realpath
rm Correct a security issue introduced in previous commit: 2006-10-31 02:22:36 +00:00
rmail
rmdir
setfacl Markup fixes. 2006-09-17 17:40:07 +00:00
sh Add the POSIX option -p to the jobs builtin command. It prints the PID of the 2006-10-07 16:51:16 +00:00
sleep
stty
sync
test
uuidgen
Makefile
Makefile.inc