➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients Maciej Olko, christian.heimes, copalco
Date 2020-11-27.11:09:34
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1606475375.03.0.215572251296.issue42481@roundup.psfhosted.org>
In-reply-to
Content 
A word of warning: os.access() is not a good and sufficient permission check. It only checks DAC (discrete access control) permissions and suffers from TOCTOU issues. Operating systems have additional permission checks and security policies, for example  mandatory access control (AppArmor, SELinux, Smack) and seccomp.
History
Date User Action Args
2020-11-27 11:09:35christian.heimessetrecipients: + christian.heimes, Maciej Olko, copalco
2020-11-27 11:09:35christian.heimessetmessageid: <1606475375.03.0.215572251296.issue42481@roundup.psfhosted.org>
2020-11-27 11:09:35christian.heimeslinkissue42481 messages
2020-11-27 11:09:34christian.heimescreate