cut and paste of link alters permissions of linked file.
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Nautilus |
Confirmed
|
Unknown
|
|||
| nautilus (Ubuntu) |
Triaged
|
High
|
Ubuntu Desktop Bugs | ||
Bug Description
Binary package hint: nautilus
$ ls -l
total 8
lrwxrwxrwx 1 louis louis 30 2008-11-21 19:17 Link to test-file -> /home/louis/
-rw-r--r-- 1 louis louis 6107 2008-11-15 22:16 test-file
$
$ # after copy and paste in nautilus
$ ls -l
total 8
lrwxrwxrwx 1 louis louis 30 2008-11-21 19:17 Link to test-file -> /home/louis/
lrwxrwxrwx 1 louis louis 30 2008-11-21 19:19 Link to test-file (copy) -> /home/louis/
-rwxrwxrwx 1 louis louis 6107 2008-11-21 19:17 test-file
$
$ nautilus --version
GNOME nautilus 2.22.5.1
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 8.04.1
Release: 8.04
Codename: hardy
I consider this a serious security problem.
Louis Jean-Richard
| Kees Cook (kees) wrote | #1 |
| Changed in nautilus: | |
| status: | New → Confirmed |
| Pedro Villavicencio (pedro) wrote | #2 |
| Changed in nautilus: | |
| assignee: | nobody → desktop-bugs |
| importance: | Undecided → High |
| status: | Confirmed → Triaged |
| Changed in nautilus: | |
| status: | Unknown → Confirmed |
| Martin Erik Werner (arand) wrote | #3 |
Confirmed; the "Paste" of the symlink seems to trigger a mode change on the original. Eww.