Debian Bug report logs - #492115
gvfs-fuse: improperly dereferences symbolic links

version graph

Package: gvfs-fuse; Maintainer for gvfs-fuse is Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>; Source for gvfs-fuse is src:gvfs.

Reported by: "brian m. carlson" <sandals@crustytoothpaste.net>

Date: Wed, 23 Jul 2008 19:45:02 UTC

Severity: important

Found in version gvfs/0.2.5-1

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Sebastien Bacher <seb128@debian.org>:
Bug#492115; Package gvfs-fuse. Full text and rfc822 format available.

Acknowledgement sent to "brian m. carlson" <sandals@crustytoothpaste.ath.cx>:
New Bug report received and forwarded. Copy sent to Sebastien Bacher <seb128@debian.org>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: "brian m. carlson" <sandals@crustytoothpaste.ath.cx>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: gvfs-fuse: improperly dereferences symbolic links
Date: Wed, 23 Jul 2008 19:41:35 +0000
[Message part 1 (text/plain, inline)]
Package: gvfs-fuse
Version: 0.2.5-1
Severity: important

When using gvfs-fuse, symbolic links are always dereferenced:

lakeview ok % ls -l ~/.gvfs/sftp\ on\ castro/vmlinuz
-r-------- 1 bmc bmc 1727456 2008-07-14 12:16 /home/bmc/.gvfs/sftp on castro/vmlinuz
castro ok % ls -l /vmlinuz
lrwxrwxrwx 1 root root 27 2008-05-14 13:27 /vmlinuz -> boot/vmlinuz-2.6.25-2-amd64

Symbolic links are a fairly essential part of any Unix filesystem, and
always dereferencing them is incorrect.  gvfs-fuse should display
symbolic links as symbolic links and not dereference them.  I would have
no objection to "fixing up" symlinks so that they point to the correct
location on the network filesystem.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gvfs-fuse depends on:
ii  libc6                         2.7-12     GNU C Library: Shared libraries
ii  libdbus-1-3                   1.2.1-2    simple interprocess messaging syst
ii  libfuse2                      2.7.3-4    Filesystem in USErspace library
ii  libglib2.0-0                  2.16.4-2   The GLib library of C routines
ii  libgvfscommon0                0.2.5-1    userspace virtual filesystem - lib

gvfs-fuse recommends no packages.

gvfs-fuse suggests no packages.

-- no debconf information

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
troff on top of XML: http://crustytoothpaste.ath.cx/~bmc/code/thwack
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
[signature.asc (application/pgp-signature, inline)]

Changed Bug submitter to '"brian m. carlson" <sandals@crustytoothpaste.net>' from '"brian m. carlson" <sandals@crustytoothpaste.ath.cx>' Request was from "brian m. carlson" <sandals@crustytoothpaste.net> to control@bugs.debian.org. (Thu, 03 Feb 2011 20:51:29 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>:
Bug#492115; Package gvfs-fuse. (Tue, 11 Mar 2014 17:33:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to althaser <althaser@gmail.com>:
Extra info received and forwarded to list. Copy sent to Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>. (Tue, 11 Mar 2014 17:33:04 GMT) Full text and rfc822 format available.

Message #12 received at 492115@bugs.debian.org (full text, mbox):

From: althaser <althaser@gmail.com>
To: "brian m. carlson" <sandals@crustytoothpaste.net>
Cc: 492115@bugs.debian.org
Subject: RE: gvfs-fuse: improperly dereferences symbolic links
Date: Tue, 11 Mar 2014 17:29:20 +0000
[Message part 1 (text/plain, inline)]
Hey Brian,

Could you please still reproduce this issue with newer versions ?

thanks
regards
althaser
[Message part 2 (text/html, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>:
Bug#492115; Package gvfs-fuse. (Wed, 12 Mar 2014 23:45:09 GMT) Full text and rfc822 format available.

Acknowledgement sent to "brian m. carlson" <sandals@crustytoothpaste.net>:
Extra info received and forwarded to list. Copy sent to Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>. (Wed, 12 Mar 2014 23:45:09 GMT) Full text and rfc822 format available.

Message #17 received at 492115@bugs.debian.org (full text, mbox):

From: "brian m. carlson" <sandals@crustytoothpaste.net>
To: althaser <althaser@gmail.com>
Cc: 492115@bugs.debian.org
Subject: Re: gvfs-fuse: improperly dereferences symbolic links
Date: Wed, 12 Mar 2014 23:43:23 +0000
[Message part 1 (text/plain, inline)]
On Tue, Mar 11, 2014 at 05:29:20PM +0000, althaser wrote:
> Hey Brian,
> 
> Could you please still reproduce this issue with newer versions ?

Yup.  It's clearly still broken:

  vauxhall ok % ls -l /run/user/1000/gvfs/sftp:host=castro.crustytoothpaste.net,user=bmc/vmlinuz
  -rwx------ 1 bmc bmc 2887760 Mar  5 13:40 /run/user/1000/gvfs/sftp:host=castro.crustytoothpaste.net,user=bmc/vmlinuz
  castro ok % ls -l /vmlinuz
  lrwxrwxrwx 1 root root 25 Feb 24 10:34 /vmlinuz -> boot/vmlinuz-3.13-1-amd64
  castro ok % ls -lL /vmlinuz
  -rw-r--r-- 1 root root 2887760 Mar  5 13:40 /vmlinuz

I have no clue where it's getting these permissions from, either.
Clearly the kernel is not executable, and it looks like it's
dereferencing the symlink, but deciding to take the permissions from the
symlink itself and then mask them off.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Apr 17 22:10:56 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.