Re: Bug#785134: Directory permissions not enforced when renaming a directory

[Samuel Thibault]

Hello,

We got an important bug report from a Debian user:

Richard Kettlewell, le Tue 12 May 2015 16:39:32 +0100, a écrit :
> richard@heceptor:~/junk$ mkdir a b
> richard@heceptor:~/junk$ chmod 555 b
> richard@heceptor:~/junk$ ls -dl a b
> drwxr-xr-x 2 richard richard 4096 May 12 15:34 a
> dr-xr-xr-x 2 richard richard 4096 May 12 15:34 b
> richard@heceptor:~/junk$ mv a b
> richard@heceptor:~/junk$ ls -l b
> total 4
> drwxr-xr-x 2 richard richard 4096 May 12 15:35 a

So it was able to put a/ inside b/ while write permissions were denied.

More concerning, this happens also with different users:

# mkdir b
# chmod 555 b

$ mkdir a
$ mv a b/
$ ls b/
a

Can somebody have a look?

Samuel