Re: [exim] dsearch

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Evgeniy Berdnikov
日付:  
To: exim-users
題目: Re: [exim] dsearch
On Thu, Jun 25, 2020 at 11:14:27AM +0100, Jeremy Harris via Exim-users wrote:
> > And I'm just curious, what a usage pattern was targeted to create two
> > distinct filters "dir" and "subdir" with such small difference?
>
> subdir for the usual case where you really do not want an
> attacker to be traversing upwards in your filesystem;
> dir for generality.


Isn't it easier to remove "." and ".." from dsearch scan list et al?
Really they are special built-in items in majority of file systems,
so it's pointless to put real data into such "files" and consequently
no sense to lookup it.
--
Eugene Berdnikov