Re: encapsulating directory operations

On Tue, 10 Jun 2025 14:07:40 +0200, Bonita Montero wrote:

Am 03.06.2025 um 02:37 schrieb Lawrence D'Oliveiro:

>
On Mon, 2 Jun 2025 09:35:24 +0200, Bonita Montero wrote:
 

Am 01.06.2025 um 09:43 schrieb Lawrence D'Oliveiro:
>

On Sun, 1 Jun 2025 07:58:54 +0200, Bonita Montero wrote:

>

Sth. like this:
>
for( directory_entry const &de : recursive_directory_iterator( "\

\",

directory_options::follow_directory_symlink ) )
cout << de.path() << endl;

>

You need the dirfd functions to avoid certain potential security
holes on operations with symlinks.

>
Which security holes ?

 
TOCTOU.

 
That's unavoidable with directory-operations.

No it isn’t. That’s why we have the fd-based calls in recent POSIX, and in
Linux. That plugs the holes, and makes it possible to implement privileged
file-access software like Samba securely.