[Condor-devel] safe_fopen_wrapper 66% safe, safe_open_wrapper only 50% safe

[Matthew Farrellee <matt@xxxxxxxxxxx>]

Blast from 12/16/2009 08:51 AM --

(i had a nice email describing the problem, but it disappeared, so 
here's the summary from memory)

There are 3 things that safefile tries to do for open/fopen with regards 
to security:

 0) don't let you create a file without an explicit mask
 1) don't let you create a file through a symlink
 2) don't let you open a file through a symlink

The implementation of safefile in Condor does not prevent you from doing 
(2).

This is because someone changed safe_open_no_create to be basically 
open, without any symlink checks.

What is the reason for that change?

Why don't we have safefile as an external?

Best,


matt