coja/lbmk
1
0
Fork 0
mirror of https://codeberg.org/libreboot/lbmk.git synced 2026-07-21 10:12:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

improve 3

Browse Source 
Signed-off-by: Leah Rowe <leah@libreboot.org>
This commit is contained in:
Leah Rowe
2026-03-26 05:16:06 +00:00
parent 4d4285e63c
commit b211706559
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
util/libreboot-utils/README.md
+8 -1
View File
@@ -24,9 +24,16 @@ the kernel/system), voluntarily error out (halt all
operation) if accessing files you don't own - that's why operation) if accessing files you don't own - that's why
sticky bits are checked for example, even when you're root. sticky bits are checked for example, even when you're root.
It... blocks symlinks, relative paths, attempts to prevent
directory escape (outside of the directory that the file
you're creating is in), basically implementing an analog
of something like e.g. unveil, but in userspace!
Mkhtemp is designed to be the most secure implementation Mkhtemp is designed to be the most secure implementation
possible, of mktemp, offering a heavy amount of hardening possible, of mktemp, offering a heavy amount of hardening
over traditional mktemp. over traditional mktemp. Written in C89, and the plan is
very much to keep this code portable over time - patches
very much welcome.
i.e. please read the source code i.e. please read the source code