diff options
author | Lasse Collin <lasse.collin@tukaani.org> | 2024-02-22 15:18:25 +0200 |
---|---|---|
committer | Lasse Collin <lasse.collin@tukaani.org> | 2024-02-22 15:18:25 +0200 |
commit | de4337fd89ca7db5feb97b5c40143404f6e22986 (patch) | |
tree | a76e4d53af285937571fe6365566ee7e95cd788c /cmake/tuklib_integer.cmake | |
parent | liblzma: Disable branchless C version in range decoder. (diff) | |
download | xz-de4337fd89ca7db5feb97b5c40143404f6e22986.tar.xz |
xz: Landlock: Fix error message if input file is a directory.
If xz is given a directory, it should look like this:
$ xz /usr/bin
xz: /usr/bin: Is a directory, skipping
The Landlock rules didn't allow opening directories for reading:
$ xz /usr/bin
xz: /usr/bin: Permission denied
The simplest fix was to allow opening directories for reading.
While it's a bit silly to allow it solely for the error message,
it shouldn't make the sandbox significantly weaker.
The single-file use case (like when called from GNU tar) is
still as strict as possible: all Landlock restrictions are
enabled before (de)compression starts.
Diffstat (limited to 'cmake/tuklib_integer.cmake')
0 files changed, 0 insertions, 0 deletions