I think the security check to invalidate ALL write requests was just a little
excessive, and violates the specification defined in the manpage to boot.
This commit is contained in:
parent
f3fb4d806f
commit
23adc6b882
@ -375,11 +375,11 @@ validate_access(filep, mode)
|
||||
|
||||
/*
|
||||
* Relative file name: search the approved locations for it.
|
||||
* Don't allow write requests or ones that avoid directory
|
||||
* Don't allow write requests that avoid directory
|
||||
* restrictions.
|
||||
*/
|
||||
|
||||
if (mode != RRQ || !strncmp(filename, "../", 3))
|
||||
if (!strncmp(filename, "../", 3))
|
||||
return (EACCESS);
|
||||
|
||||
/*
|
||||
|
Loading…
Reference in New Issue
Block a user