Qubes component: core-agent-linux
4a732564fa
Otherwise, when the user moves directory, which is still in transfer, somewhere else, it could allow malicious source domain to escape chroot and place a file in arbitrary location. It looks like bind mount is just enough - simple rename fails with EXDEV, so tools are forced to perform copy+delete, which is enough to keep unpacker process away from new file location. One inconvenient detail is that we must clean the mount after transfer finishes, so root perms cannot be dropped completely. We keep separate process for only that reason. |
||
|---|---|---|
| archlinux | ||
| debian | ||
| doc | ||
| misc | ||
| network | ||
| pkgs | ||
| qrexec | ||
| qubes-rpc | ||
| rpm_spec | ||
| vm-init.d | ||
| vm-systemd | ||
| .gitignore | ||
| LICENSE | ||
| Makefile | ||
| Makefile.builder | ||
| version | ||