Proposal: removeDirectoryRecursive should not follow symlinks

David Feuer david.feuer at gmail.com
Mon Jan 5 23:51:27 UTC 2015


In case some people don't understand just how horrible this is: imagine a
privileged user uses this to erase a user's home directory. It could easily
hit a symbolic link to a critical system directory and hose the whole
machine.
On Jan 5, 2015 6:44 PM, "Brandon Allbery" <allbery.b at gmail.com> wrote:

> On Mon, Jan 5, 2015 at 5:54 PM, Johan Tibell <johan.tibell at gmail.com>
> wrote:
>
>> Aside: can we look at what other languages with similar functions do?
>
>
> You will find that essentially all other implementations do the right
> thing and not follow symlinks, because the other behavior is a severe bug.
> I really do not understand why anyone believes the current behavior is
> defensible.
>
> --
> brandon s allbery kf8nh                               sine nomine
> associates
> allbery.b at gmail.com
> ballbery at sinenomine.net
> unix, openafs, kerberos, infrastructure, xmonad
> http://sinenomine.net
>
> _______________________________________________
> Libraries mailing list
> Libraries at haskell.org
> http://www.haskell.org/mailman/listinfo/libraries
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.haskell.org/pipermail/libraries/attachments/20150105/82311aa4/attachment.html>


More information about the Libraries mailing list