Andrew Tridgell cd22f195ef testsuite: lock down the in-module symlink-escape resolution matrix ...

daemon-symlink-escape-matrix exercises, for a writable non-chroot module, every
combination of `insecure links` {no,yes} x `munge symlinks` {no,yes} x link
origin {pre-existing, uploaded} x op {read pull, write push} x five symlink
target types (rel-within, rel-outside, rel-transits [.. above the module root
then back in], abs-outside, abs-inside).

It pins the contract: the secure default follows only an in-tree (rel-within)
link and NEVER reaches an out-of-module target (read or write); the
`insecure links = yes` opt-out restores legacy following on sender AND receiver
(so an outside target escapes, matching stock 3.2.7); and an uploaded link never
escapes regardless (munge prefixes it, munge-off sanitises it).  A secure-default
out-of-module access is a hard failure.  require_tcp + root gated; listed in the
per-platform RSYNC_EXPECT_SKIPPED pipe make-check sets.

2026-07-20 14:05:31 +10:00

..

workflows

testsuite: lock down the in-module symlink-escape resolution matrix

2026-07-20 14:05:31 +10:00

FUNDING.yml

fix funding github username

2026-06-15 13:58:46 +10:00