Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cargo and Rustup safe file discovery. #3279

Open
wants to merge 16 commits into
base: master
Choose a base branch
from
+610 −0
Open

Cargo and Rustup safe file discovery. #3279

Changes from 14 commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
0977aa8
Cargo and Rustup safe file discovery.
ehuss Jun 8, 2022
5987f6d
Mention UID reuse.
ehuss Jul 11, 2022
d4032ae
Add note on TOCTOU
ehuss Jul 11, 2022
1822884
Discuss CWD more.
ehuss Jul 11, 2022
b7677ef
Some minor editorial fixes.
ehuss May 20, 2023
a85f0d7
Add a section describing the kinds of security threats this is attemp…
ehuss May 20, 2023
4daaa0f
Update the suggested error message to better explain what is happening.
ehuss May 20, 2023
a96b38e
Update now that `--config` is stabilized.
ehuss May 20, 2023
c44fd34
Add CVE-2022-29187 and describe git's behavior in more detail.
ehuss May 20, 2023
1d874ba
Add sudo relaxation.
ehuss May 20, 2023
0fc1587
Update now that cargo has picked up the libgit2 updates.
ehuss May 20, 2023
667d889
Justify why symlinks are not followed.
ehuss May 20, 2023
4e0b1b5
Add section mentioning lack of ACL verification.
ehuss May 20, 2023
d749196
Add a more complete TOCTOU section.
ehuss May 20, 2023
0834734
Introduce a temporary warning period.
ehuss Jun 6, 2023
87233bc
Updates from review.
ehuss Jul 27, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading