From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from tb-mx1.topicbox.com (localhost.local [127.0.0.1]) by tb-mx1.topicbox.com (Postfix) with ESMTP id 5131C284057D for <9fans@9fans.net>; Sun, 7 Jun 2020 22:20:22 -0400 (EDT) (envelope-from charles.forsyth@gmail.com) Received: from tb-mx1.topicbox.com (localhost [127.0.0.1]) by tb-mx1.topicbox.com (Authentication Milter) with ESMTP id 5A8D054731D; Sun, 7 Jun 2020 22:20:22 -0400 ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t= 1591582822; b=DhBlnTZZf0FmJrO9GMBA/QxgCCRgQ9jO9VURPWBmtjy4509cJi wriUeUpAfxUSoc0NvAxp8Hq3BBSn64vitl781/5vaID/pSvEneRq1N10vVUW++MM rok99UlQYcfoE9UgLRo9zAE+M6ZFmKMimhiD4REfef+JCCZh2Ai3ZCJbSDWKY6nk 7bH2xsohMYwdHM9D/trnmvZHFLXBiI/G/VavYcB7YquIoeYkCHxQITGdXHcYmxNu hgPNMoOrvwZykhZfSoTU6NLg6ve/JgxGHTUz+N9gTm9idWI0TGuSjJMS0a/InV2p ibttBy8axfmneIJJ0oy9gls7zMrIZpTxF0Ww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-type; s=arcseal; t=1591582822; bh=0cDoBupvERzk4bzgRFjnYPe/OSWiUsawc1i+oR17yBM=; b=GNlRQQPIbsV7 X6hfsskGSli64Do2zZzpghdO5CPeRYw2gihxTREFvLNpe1zSDBxsl3hXbUXlFQuc zV6a1r3/V6Y2JIYm782JqrxB8f+/YiRpycVaXMx+tmGUNV0s4X0cA8Bt2iZiWPHY X9/cVPIN58VkNLnfcEnqsVHawBIKvb+uSQOEjUG88G2Yn/M7FQKpW8X1API9rKME DVa7R/gPleV4WpnTSrBxQiXkNrQ10ntjdqNOj79T8GKnWjQludtNmUFZJ1OkwdhJ OmATmlPSvBsbngydM044L0SdjOGV2+8kL52OxFqdkolMtTq+XrBh9uEIPDOxOq+e wxWL/FS7og== ARC-Authentication-Results: i=1; tb-mx1.topicbox.com; arc=none (no signatures found); bimi=none (Domain is not BIMI enabled); dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=dCQ2uLU7 header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; iprev=pass smtp.remote-ip=209.85.217.45 (mail-vs1-f45.google.com); spf=pass smtp.mailfrom=charles.forsyth@gmail.com smtp.helo=mail-vs1-f45.google.com; x-aligned-from=pass (Address match); x-google-dkim=pass (2048-bit rsa key) header.d=1e100.net header.i=@1e100.net header.b=jrHgddqC; x-ptr=pass smtp.helo=mail-vs1-f45.google.com policy.ptr=mail-vs1-f45.google.com; x-return-mx=pass header.domain=gmail.com policy.is_org=yes (MX Records found: alt4.gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com); x-return-mx=pass smtp.domain=gmail.com policy.is_org=yes (MX Records found: alt4.gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 Authentication-Results: tb-mx1.topicbox.com; arc=none (no signatures found); bimi=none (Domain is not BIMI enabled); dkim=pass (2048-bit rsa key sha256) header.d=gmail.com header.i=@gmail.com header.b=dCQ2uLU7 header.a=rsa-sha256 header.s=20161025 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=quarantine policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p header.from=gmail.com; iprev=pass smtp.remote-ip=209.85.217.45 (mail-vs1-f45.google.com); spf=pass smtp.mailfrom=charles.forsyth@gmail.com smtp.helo=mail-vs1-f45.google.com; x-aligned-from=pass (Address match); x-google-dkim=pass (2048-bit rsa key) header.d=1e100.net header.i=@1e100.net header.b=jrHgddqC; x-ptr=pass smtp.helo=mail-vs1-f45.google.com policy.ptr=mail-vs1-f45.google.com; x-return-mx=pass header.domain=gmail.com policy.is_org=yes (MX Records found: alt4.gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com); x-return-mx=pass smtp.domain=gmail.com policy.is_org=yes (MX Records found: alt4.gmail-smtp-in.l.google.com,alt3.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=0 state=0 X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgeduhedrudehtddgheejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucenucfjughrpeggfhgjhf ffkffuvfgtsegrtderredttdejnecuhfhrohhmpeevhhgrrhhlvghsucfhohhrshihthhh uceotghhrghrlhgvshdrfhhorhhshihthhesghhmrghilhdrtghomheqnecuggftrfgrth htvghrnhepfeeftefhvefhveetjedthfeifeeiveehjeelvdegvedvgeelgfevtdelgfeg ieeknecuffhomhgrihhnpehtohhpihgtsghogidrtghomhenucfkphepvddtledrkeehrd dvudejrdegheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpedv tdelrdekhedrvddujedrgeehpdhhvghlohepmhgrihhlqdhvshduqdhfgeehrdhgohhogh hlvgdrtghomhdpmhgrihhlfhhrohhmpeeotghhrghrlhgvshdrfhhorhhshihthhesghhm rghilhdrtghomhequcfukfgkgfepjedvheej X-ME-VSScore: 0 X-ME-VSCategory: clean Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use 'charles.forsyth@gmail.com' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=tb-mx1.topicbox.com; identity=mailfrom; envelope-from="charles.forsyth@gmail.com"; helo=mail-vs1-f45.google.com; client-ip=209.85.217.45 Received: from mail-vs1-f45.google.com (mail-vs1-f45.google.com [209.85.217.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tb-mx1.topicbox.com (Postfix) with ESMTPS for <9fans@9fans.net>; Sun, 7 Jun 2020 22:20:21 -0400 (EDT) (envelope-from charles.forsyth@gmail.com) Received: by mail-vs1-f45.google.com with SMTP id c1so8867227vsc.11 for <9fans@9fans.net>; Sun, 07 Jun 2020 19:20:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0cDoBupvERzk4bzgRFjnYPe/OSWiUsawc1i+oR17yBM=; b=dCQ2uLU7U4vl2XKuKyV++nRww6SsDw+P9gHEAn04KhkYYsheDfMp10dalwdsXW6Z/O 7zGQqq+cZ0v42pdx1SwFQ/ut46eSl72See7o5HqA7eDU/Bfpi2z0AaVL3jPKZda3a6YT ahoQRILvFy0vf3xM8cuCjdLwSzYdrma506e6R7AXaVCZ2kWPcagzVziPDm2cmJ5tqRQu KyV9geM0j4+gxgOF2wErs1aeUxTu6tRc7BGV2f5S8bk72YbwDytHC3mC+TKha5Bw4aGt gUKxp5P7TkPI4u7fizxQje6PONYWyccTHQs3NN+nFNVq8ngy1m9VJsA+0sl47dMvsyFi BAPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0cDoBupvERzk4bzgRFjnYPe/OSWiUsawc1i+oR17yBM=; b=jrHgddqC4FDQE0t5/PUgrc8dfha0qE4SVMhYrjt3vYD0iNHX/q1P+XhzAl62n/ZB7T sqDaWQsHlzELw9ovYdxYNV7svKeaU5MXguuphMViQp8n5U5jEllh1CE22GNzPKj4vpSl vK1b1oRcrwW0kDkLw9DmDxHJkBiuqNxdByn4zTPZ5HvWUWIoVNK1IzsW3KZu2g1ngzGQ D/GP8zsly0KR9yFKqU8jf/p69bqKnQbj8EUwGGMEejoVKM+k5/J8+piP/OH+JQHTzoj8 lnyRdA0o1QO0iEtUy48Vn3n3jCrWk+CN8OmmQaEtOCJEdLr0OTYOfA/VUhUgVNrj+938 QUWw== X-Gm-Message-State: AOAM531adO5lzRhwL/26yispaQ8mQCBAOadR7lFVGzVvtklmivmUAu5J X8NHOgjrCF6Rz+A8+t+2Tm+ru7aDoYubIsz+FtJ9xxk0 X-Google-Smtp-Source: ABdhPJwcvA51vmqqeSuEAeD+Z19rVpW5jJLgcCDSIdGiPMJXQeF+IsAToRThFWf3+hL4AbLHXI7dcyMeMKMLI5itIPg= X-Received: by 2002:a67:eaca:: with SMTP id s10mr13710200vso.58.1591582820900; Sun, 07 Jun 2020 19:20:20 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Charles Forsyth Date: Mon, 8 Jun 2020 03:20:09 +0100 Message-ID: Subject: Re: [9fans] `test -x` returns wrong results for directories To: 9fans <9fans@9fans.net> Cc: Richard Miller <9fans@hamnavoe.com> Content-Type: multipart/alternative; boundary="000000000000aba37505a7894082" Topicbox-Policy-Reasoning: allow: sender is a member Topicbox-Message-UUID: 9e6fb866-a92e-11ea-962c-d0c9f2e6d5e4 --000000000000aba37505a7894082 Content-Type: text/plain; charset="UTF-8" I see I'd misapplied the rule in walk(5) so fossil is fine. It has to do with searching from . when you are there, which makes sense, not when entering the directory from its parent, so ignore that part of my earlier post. On Mon, Jun 8, 2020 at 3:13 AM Charles Forsyth wrote: > "search" is exactly the wrong word for what this bit does, because if you >> don't have "search" permission, the one thing you can still do is look at >> the names. > > > in ramfs, but that's a bug that no-one had noticed > > On Mon, Jun 8, 2020 at 3:05 AM wrote: > >> >>> So, cd'ing into a directory withut +x leads >> >>> to an inescapabler trap. >> >> ... >> >> fossil just moved up another notch in my estimation because directory >> search restriction is so broken. >> > >> > ori@eigenstate.org, what version of fossil were your experiments done >> on? >> > My observations are different: >> > >> > term% mkdir -p d/a/b >> > term% touch d/x >> > term% chmod -x d >> > term% ls -ld d >> > d-rw-r--r-- M 12 miller miller 0 Jun 7 16:38 d >> > term% cd d >> > term% cd .. >> > term% ls d >> > d/a >> > d/x >> > term% >> > >> > No trap that I can see here. >> >> cwfs, but -- yeah, it's enforced inconsistently across >> different file systems. (of course). >> >> >> ------------------------------------------ >> 9fans: 9fans >> Permalink: >> https://9fans.topicbox.com/groups/9fans/Tdd7a9b1b32d01f54-M9cf36356f4d9761339774af6 >> Delivery options: https://9fans.topicbox.com/groups/9fans/subscription >> > --000000000000aba37505a7894082 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I see I'd misapplied the rule in walk(5) so fossil is = fine. It has to do with searching from . when you are there, which makes se= nse, not when entering the directory from its parent,
so ignore that pa= rt of my earlier post.


On Mon, Jun 8, 2020 at 3:13 AM C= harles Forsyth <charles.for= syth@gmail.com> wrote:
"search" is exactly the wr= ong word for what this bit does, because if you don't have "search= " permission, the one thing you can still do is look at the names.

in ramfs, but that's a bug that no-= one had noticed=C2=A0

On Mon, Jun 8, 2020 at 3:05 AM <ori@eigenstate.org> wrote= :
>>> S= o, cd'ing into a directory withut +x leads
>>> to an inescapabler trap.
>> ...
>> fossil just moved up another notch in my estimation because direct= ory search restriction is so broken.
>
> ori@eigenstate= .org, what version of fossil were your experiments done on?
> My observations are different:
>
> term% mkdir -p d/a/b
> term% touch d/x
> term% chmod -x d
> term% ls -ld d
> d-rw-r--r-- M 12 miller miller 0 Jun=C2=A0 7 16:38 d
> term% cd d
> term% cd ..
> term% ls d
> d/a
> d/x
> term%
>
> No trap that I can see here.

cwfs, but -- yeah, it's enforced inconsistently across
different file systems. (of course).


------------------------------------------
9fans: 9fans
Permalink: https:= //9fans.topicbox.com/groups/9fans/Tdd7a9b1b32d01f54-M9cf36356f4d9761339774a= f6
Delivery options: https://9fans.topicbox.com/gro= ups/9fans/subscription
--000000000000aba37505a7894082--