Files
rsync/support
Andrew Tridgell 88cee08963 rrsync: pin path components against a TOCTOU and fail closed on anomalies
Pin each validated path component (and a receiver-side new destination's parent)
with O_RDONLY|O_NOFOLLOW and pass /proc/self/fd/N to the exec'd rsync so the child
cannot re-resolve the path; probe the /proc/self/fd magic-symlink at runtime (not
just isdir); fail closed on a readlink anomaly; and don't abort when flock() is
unavailable (Solaris).
2026-07-20 14:05:31 +10:00
..