Bug 488568 - getfacl follows symlinks, even without -L
Summary: getfacl follows symlinks, even without -L
Keywords:
Status: CLOSED DUPLICATE of bug 488674
Alias: None
Product: Fedora
Classification: Fedora
Component: acl
Version: 10
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Kamil Dudka
QA Contact: Fedora Extras Quality Assurance
URL: http://oss.sgi.com/bugzilla/show_bug....
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-03-04 20:43 UTC by Leo Bergolth
Modified: 2009-12-17 13:51 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-12-17 13:51:24 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Leo Bergolth 2009-03-04 20:43:41 UTC
getfacl from acl-2.2.47 has a bug which causes it to follow symlinks even if it shouldn't ('-L' option not specified).

This is a known bug and it's already fixed in SGIs CVS:
http://oss.sgi.com/bugzilla/show_bug.cgi?id=790

Since many users are using getfacl to backup ACLs, an updated Fedora package that contains the patches would be nice, because this bug leads to infinite loops if it follows symlinks that e.g. point to higher directory levels.

IMHO an updated package should contain the following patches:

http://oss.sgi.com/cgi-bin/cvsweb.cgi/xfs-cmds/acl/libmisc/walk_tree.c.diff?r1=1.2;r2=1.3

http://oss.sgi.com/bugzilla/attachment.cgi?id=247

Comment 1 Bug Zapper 2009-11-18 11:16:51 UTC
This message is a reminder that Fedora 10 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 10.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '10'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 10's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 10 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 2 Kamil Dudka 2009-12-17 12:26:08 UTC
It works as documented:
-L, --logical
    Logical  walk, follow symbolic links to directories. The default
    behavior is to follow symbolic link arguments, and skip symbolic
    links encountered in subdirectories.  Only effective in
    combination with -R.

If you think it does not, please be more verbose and write in particular:
1. what are you trying to do
2. what are you expecting to get (and why)
3. what are you getting actually

Comment 3 Leo Bergolth 2009-12-17 12:50:58 UTC
It follows symlinks, even if "-L" is not specified.
As you cited from the man-page, getfacl shouldn't follow symlinks in subdirectories if "-L" is not specified.

Please see the upstream bug I quoted in my first report for details and for the patch.

Comment 4 Kamil Dudka 2009-12-17 13:10:18 UTC
(In reply to comment #0)
> getfacl from acl-2.2.47 has a bug which causes it to follow symlinks even if it
> shouldn't ('-L' option not specified).

The above is not a bug, but documented behavior.

> http://oss.sgi.com/bugzilla/show_bug.cgi?id=790

This issue will be addressed, see the bug 488674.

You still didn't answered my questions 1, 2 and 3, therefore I won't be able to verify if the fix solves your problem.

Comment 5 Leo Bergolth 2009-12-17 13:38:17 UTC
# mkdir a
# ln -s nonexistingfile a/symlink
# getfacl -R a

Result:
# file: a
# owner: bergolth
# group: edvz
user::rwx
group::r-x
other::r-x

# file: a/file
# owner: bergolth
# group: edvz
user::rw-
group::r--
other::r--

getfacl: a/symlink: No such file or directory

Expected result:
above output without the error message.

strace shows that it first does an lstat and then a stat. The second system call shouldn't happen on symlinks if "-L" is not specified.

lstat64("a/symlink", {st_mode=S_IFLNK|0777, st_size=15, ...}) = 0
stat64("a/symlink", 0xbff79eb8)         = -1 ENOENT (No such file or directory)

Again, this is explained in detail in
> http://oss.sgi.com/bugzilla/show_bug.cgi?id=790

Comment 6 Kamil Dudka 2009-12-17 13:51:24 UTC
Thanks for the reproducer! It's fixed in acl-2.2.48, I'll build it for Fedora 11+.

*** This bug has been marked as a duplicate of bug 488674 ***


Note You need to log in before you can comment on or make changes to this bug.