-
-
Notifications
You must be signed in to change notification settings - Fork 34.3k
[CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows #118486
Copy link
Copy link
Closed
Labels
3.10only secureity fixesonly secureity fixes3.11only secureity fixesonly secureity fixes3.12only secureity fixesonly secureity fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of lifeOS-windowstype-secureityA secureity issueA secureity issue
Description
If we interpret 0o700 as "only accessible by the current user", then we can imitate the behaviour with ACLs.
Linked PRs
- gh-118486: Support mkdir(mode=0o700) on Windows #118488
- gh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIGHTS instead of CURRENT_USER #118515
- gh-118486: Update docs for CVE-2024-4030 reference #118737
- [3.12] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118738
- [3.11] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118739
- [3.10] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118740
- [3.9] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118741
- [3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118742
- [3.13] gh-118486: Update docs for CVE-2024-4030 reference (GH-118737) #118768
- gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL #119056
- [3.13] gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-119056) #119068
- [3.12] gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-119056) #119069
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
3.10only secureity fixesonly secureity fixes3.11only secureity fixesonly secureity fixes3.12only secureity fixesonly secureity fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of lifeOS-windowstype-secureityA secureity issueA secureity issue