Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 705830 - Policy Guide: absolute symlink target policy
Summary: Policy Guide: absolute symlink target policy
Status: RESOLVED FIXED
Alias: None
Product: Quality Assurance
Classification: Unclassified
Component: Policies (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Quality Assurance Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-01-19 12:41 UTC by Michał Górny
Modified: 2021-07-21 01:15 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
0001-filesystem-Policy-against-absolute-targets.patch (0001-filesystem-Policy-against-absolute-targets.patch,1.94 KB, text/x-diff)
2020-01-19 12:41 UTC, Michał Górny
Details
v2 (0001-filesystem-Policy-against-absolute-targets.patch,1.70 KB, patch)
2020-01-19 17:20 UTC, Michał Górny
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-01-19 12:41:16 UTC
Please review/vote on the attached patch.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-01-19 12:41:50 UTC
Created attachment 603710 [details]
0001-filesystem-Policy-against-absolute-targets.patch
Comment 2 Ulrich Müller gentoo-dev 2020-01-19 13:05:45 UTC
"Portage has a historical hack ..." How is that paragraph relevant? We should consider what PMS says, not package manager bugs that have been fixed long time ago.

(Also, won't that portage bug defeat what the policy says about /proc and /run?)
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-01-19 13:44:23 UTC
(In reply to Ulrich Müller from comment #2)
> "Portage has a historical hack ..." How is that paragraph relevant? We
> should consider what PMS says, not package manager bugs that have been fixed
> long time ago.

It provides additional reason why it won't work.

> (Also, won't that portage bug defeat what the policy says about /proc and
> /run?)

Yes, it breaks it.  However, I don't think we should explicitly ban this for the sake of Portage on Prefix.
Comment 4 Ulrich Müller gentoo-dev 2020-01-19 14:53:32 UTC
(In reply to Michał Górny from comment #3)
> It provides additional reason why it won't work.

It just weakens the reasoning of the preceding paragraph.

If absolute symlinks are bad in the non-prefix case, then the first part of the rationale should be enough. OTOH, if we would need prefix and portage bugs as arguments, then we shouldn't have this policy.
Comment 5 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2020-01-19 17:20:04 UTC
Created attachment 603732 [details, diff]
v2

Removed the second reason.
Comment 6 Ulrich Müller gentoo-dev 2020-01-19 17:40:05 UTC
(In reply to Michał Górny from comment #5)
> Created attachment 603732 [details, diff] [details, diff]
> v2
> 
> Removed the second reason.

LGTM
Comment 7 Larry the Git Cow gentoo-dev 2020-01-19 20:10:37 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/proj/policy-guide.git/commit/?id=acb2659d5d3c67579105d0b297dfda4bc92edf47

commit acb2659d5d3c67579105d0b297dfda4bc92edf47
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2020-01-19 12:39:34 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2020-01-19 20:09:53 +0000

    filesystem: Policy against absolute symlink targets
    
    Closes: https://bugs.gentoo.org/705830
    Closes: https://github.com/gentoo/policy-guide/pull/5
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 filesystem.rst | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)