Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows #118486

Open
zooba opened this issue May 1, 2024 · 2 comments
Open

[CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows #118486

zooba opened this issue May 1, 2024 · 2 comments
Assignees
@zooba
Labels
3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 bugs and security fixes OS-windows type-security A security issue

Comments

@zooba
Copy link
Member

zooba commented May 1, 2024 •
edited by bedevere-app bot

If we interpret 0o700 as "only accessible by the current user", then we can imitate the behaviour with ACLs.

Linked PRs
@zooba zooba self-assigned this May 1, 2024
@bedevere-app bedevere-app bot mentioned this issue May 1, 2024
Merged
zooba added a commit to zooba/cpython that referenced this issue May 1, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
4bd91f2
zooba added a commit that referenced this issue May 2, 2024
@zooba
gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488)
81939da
zooba added a commit to zooba/cpython that referenced this issue May 2, 2024
@zooba
pythongh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIG…
77b83f4 
…HTS instead of CURRENT_USER
@bedevere-app bedevere-app bot mentioned this issue May 2, 2024
Merged
zooba added a commit that referenced this issue May 2, 2024
@zooba
gh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIGHTS in…
8ed5466 
…stead of CURRENT_USER (GH-118515)
@nineteendo
Copy link
Contributor

Are you done here?

@zooba
Copy link
Member Author

zooba commented May 3, 2024

No, not yet.

@zooba zooba changed the title Enable mkdir(mode=0o700) to work on Windows [CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows May 7, 2024
@bedevere-app bedevere-app bot mentioned this issue May 7, 2024
Merged
@zooba zooba added type-security A security issue 3.11 only security fixes 3.10 only security fixes 3.9 only security fixes 3.8 only security fixes 3.12 bugs and security fixes labels May 7, 2024
zooba added a commit to zooba/cpython that referenced this issue May 7, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
1193b36
zooba added a commit to zooba/cpython that referenced this issue May 7, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
018a779
zooba added a commit to zooba/cpython that referenced this issue May 7, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
c85fa1f
zooba added a commit to zooba/cpython that referenced this issue May 7, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
86da8de
This was referenced May 7, 2024
Merged
Open
Open
Open
Open
zooba added a commit to zooba/cpython that referenced this issue May 7, 2024
@zooba
pythongh-118486: Support mkdir(mode=0o700) on Windows
ffed50e
SonicField pushed a commit to SonicField/cpython that referenced this issue May 8, 2024
@zooba @SonicField
pythongh-118486: Support mkdir(mode=0o700) on Windows (pythonGH-118488)
7ff1c09
SonicField pushed a commit to SonicField/cpython that referenced this issue May 8, 2024
@zooba @SonicField
pythongh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIG…
abd0602 
…HTS instead of CURRENT_USER (pythonGH-118515)
@bedevere-app bedevere-app bot mentioned this issue May 8, 2024
Merged
zooba added a commit that referenced this issue May 8, 2024
@zooba
gh-118486: Update docs for CVE-2024-4030 reference (GH-118737)
66f8bb7
zooba added a commit to zooba/cpython that referenced this issue May 9, 2024
@zooba
Merge branch '3.13' into pythongh-118486-doc-3.13
7651f58
zooba added a commit that referenced this issue May 9, 2024
@zooba
gh-118486: Update docs for CVE-2024-4030 reference (GH-118737)
d86b494 
Update docs for CVE-2024-4030 reference
zooba added a commit to zooba/cpython that referenced this issue May 9, 2024
@zooba
Merge branch 'pythongh-118486-3.11' of https://github.com/zooba/cpython…
1288fdc 
… into pythongh-118486-3.11
zooba added a commit that referenced this issue May 9, 2024
@zooba
gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488)
eb29e2f
@bedevere-app bedevere-app bot mentioned this issue May 14, 2024
Merged
zooba added a commit to zooba/cpython that referenced this issue May 14, 2024
@zooba
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL
f6ec3b1
zooba added a commit that referenced this issue May 15, 2024
@zooba
gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-1…
94591dc 
…19056)
miss-islington pushed a commit to miss-islington/cpython that referenced this issue May 15, 2024
@zooba @miss-islington
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
4b6d638 
…pythonGH-119056)

(cherry picked from commit 94591dc)

Co-authored-by: Steve Dower <[email protected]>
miss-islington pushed a commit to miss-islington/cpython that referenced this issue May 15, 2024
@zooba @miss-islington
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
1da9d7d 
…pythonGH-119056)

(cherry picked from commit 94591dc)

Co-authored-by: Steve Dower <[email protected]>
This was referenced May 15, 2024
Merged
Merged
zooba added a commit to zooba/cpython that referenced this issue May 15, 2024
@zooba
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
e598a53 
…pythonGH-119056)
zooba added a commit to zooba/cpython that referenced this issue May 15, 2024
@zooba
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
77ede7c 
…pythonGH-119056)
zooba added a commit to zooba/cpython that referenced this issue May 15, 2024
@zooba
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
1946e26 
…pythonGH-119056)
zooba added a commit to zooba/cpython that referenced this issue May 15, 2024
@zooba
pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…
c4b3f7a 
…pythonGH-119056)
zooba added a commit that referenced this issue May 15, 2024
@miss-islington @zooba
gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-1…
e1dfa97 
…19056)

(cherry picked from commit 94591dc)

Co-authored-by: Steve Dower <[email protected]>
zooba added a commit that referenced this issue May 15, 2024
@miss-islington @zooba
gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-1…
6d0850c 
…19056)

(cherry picked from commit 94591dc)

Co-authored-by: Steve Dower <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@zooba zooba

Labels
3.8 only security fixes 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 bugs and security fixes OS-windows type-security A security issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@zooba @nineteendo