[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2513: Magic Folder: the localdir argument to the 'tahoe magic-folder {create, join}' commands should be expanded to an absolute path
Tahoe-LAFS
trac at tahoe-lafs.org
Fri Oct 2 19:35:26 UTC 2015
#2513: Magic Folder: the localdir argument to the 'tahoe magic-folder
{create,join}' commands should be expanded to an absolute path
-------------------------------------------------+-------------------------
Reporter: daira | Owner: dawuud
Type: defect | Status: new
Priority: major | Milestone:
Component: code-frontend-magic-folder | undecided
Keywords: tahoe-magic-folder cli security | Version: 1.10.1
reliability usability error | Launchpad Bug:
-------------------------------------------------+-------------------------
If you pass a relative path as the local directory to the `tahoe magic-
folder create` or `tahoe magic-folder join` command, it will be copied
into the node's `tahoe.cfg` entry for `[magic-folder]local.directory` as-
is.
This causes the running node to expand the path relative to its node
directory, which is counterintuitive and insecure (since the local
directory tree will include the `private/` subdirectory).
The `create` and `join` commands should expand the path relative to the
current directory of the command. It may also be useful to detect cases
where there is a node directory underneath a local directory and avoid
uploading those files, in case the user does this by accident. (This might
cause an infinite regress if the node directory is for a server that is
storing shares for the Magic Folder DMD -- and is in any case
undesirable.)
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2513>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list