juju deploy w/ local charm doesn't fail with non contained symlink
Bug #1227020 reported by
Kapil Thangavelu
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
juju-core |
Fix Released
|
Medium
|
Unassigned |
Bug Description
a local charm had a symlink to a parent directory outside the charm.. and juju deploy of it succeeded... which it shouldn't have.. non local symlinks Should not be allowed in a charm, and should cause an appropriate error msg. 2 out of a classroom of 15 hit this..
tags: | added: charms security |
Changed in juju-core: | |
importance: | High → Medium |
Changed in juju-core: | |
status: | Triaged → Fix Released |
To post a comment you must log in.
What if it is a symlink to a standard location like /etc/foobar ? I sort of agree, but I'm wondering if there is a genuine use case for symlinking a local name for a system entry.