Skip to content

Root::mkdir_all: should we even return an error for mode=0777? #280

@cyphar

Description

@cyphar

This logic was added back when we were trying to defend against being tricked into walking into an attacker-controlled directory, but this was all ripped out in commit ce6226e ("Root::mkdir_all: remove all mkdir+open verification logic") so maybe we should also remove this validation to match other Root subcommands?

Metadata

Metadata

Assignees

No one assigned

    Labels

    api/rootRelated to the Root API.

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions