bugGNU nano - Bugs: bug #65819, {backup} in a string bind can...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #65819: {backup} in a string bind can sidestep restricted mode

Submitter:  Benno Schulenberg <bens>
Submitted:  Fri 31 May 2024 11:00:36 AM UTC
   
 
Severity:  3 - Normal Status:  Fixed
Assigned to:  bens Open/Closed:  Closed

Sat 01 Jun 2024 09:38:36 AM UTC, comment #1: 

Fixed in git, commit 68974884, by conditionalizing the toggling of the Backup flag (and the Append and Prepend flags, and the Browser function) on not being in restricted mode.

Benno Schulenberg <bens>
Group administrator
Fri 31 May 2024 11:00:36 AM UTC, original submission:  

To reproduce, do:

rm -v README~

echo 'bind ^P "{backup}" writeout' >sneakrc

src/nano --rc=sneakrc --restrict  README

Then type: ^O ^P
See that "[Backup]" has been activated, even though this should not be possible in restricted mode.

Now type: <Enter> ^X
Followed by: ls -l README*
See that a README~ backup file was written.

Benno Schulenberg <bens>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bens (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2024-07-13 bens Open/ClosedOpen Closed
    2024-06-01 bens StatusNone Fixed

    Back to the top

    Powered by Savane 3.13-e652.
    Corresponding source code