Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Correct directory iteration options #3127

Merged

Conversation

sgaist
Copy link
Contributor

@sgaist sgaist commented Mar 4, 2024

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind documentation

/kind failing-test

/kind feature

/kind release

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area build

/area engine

/area tests

/area proposals

/area CI

What this PR does / why we need it:

The original code was using follow_directory_symlink twice, this patch fixes that.

That was detected by cppcheck.

Which issue(s) this PR fixes:

Part of #3052

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

fix(userspace/configuration): make sure that folders that would trigger permission denied are not traversed

The original code was using follow_directory_symlink twice, this patch
fixes that.

Signed-off-by: Samuel Gaist <[email protected]>
Copy link
Contributor

@incertum incertum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

Makes sense to me

/milestone 0.38.0

@poiana poiana added this to the 0.38.0 milestone Mar 5, 2024
@poiana poiana added the lgtm label Mar 5, 2024
@poiana
Copy link
Contributor

poiana commented Mar 5, 2024

LGTM label has been added.

Git tree hash: a3dbe8bf280c342853d7507540698a1a91a9f183

@poiana poiana added the approved label Mar 5, 2024
@poiana
Copy link
Contributor

poiana commented Mar 5, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: incertum, LucaGuerra, sgaist

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:
  • OWNERS [LucaGuerra,incertum]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana merged commit 8f87b11 into falcosecurity:master Mar 5, 2024
27 checks passed
@sgaist sgaist deleted the fix_rules_file_directory_traversal branch March 6, 2024 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

4 participants