Re: [Bug-tar] [PATCH] Intelligent subdirectory creation to guard against tarbombs

[Eric Blake]

On 08/08/2013 08:28 AM, Paul Eggert wrote:
> On 08/08/2013 07:10 AM, Eric Blake wrote:
>> Except as a new option that requires no argument, it is easy to modify
>> the user's login scripts to set up an alias around tar, so that the
>> option is ALWAYS supplied in the user's given interactive environment,
>> where it does the right thing for both tarbombs and normal tar files
>> with all contents in a single directory.
> 
> I don't know, that sounds a bit intrusive.  Many tar files
> don't follow these new rules.  The tz database, for example.

That's the point of the proposal - it allows one to unpack the tz
database where all files are unpacked into a new directory rather than
polluting the current directory, without over-nesting other tarballs
that already unpack into a single directory, all by allowing the user to
set up an alias to tar that turns on the new option.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

signature.asc
Description: OpenPGP digital signature