* [Bug debuginfod/30962] New: ensure x-debuginfod-file / -archive headers always return full path names
@ 2023-10-10 19:52 fche at redhat dot com
2023-10-12 15:47 ` [Bug debuginfod/30962] " fche at redhat dot com
0 siblings, 1 reply; 2+ messages in thread
From: fche at redhat dot com @ 2023-10-10 19:52 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=30962
Bug ID: 30962
Summary: ensure x-debuginfod-file / -archive headers always
return full path names
Product: elfutils
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: debuginfod
Assignee: unassigned at sourceware dot org
Reporter: fche at redhat dot com
CC: elfutils-devel at sourceware dot org
Target Milestone: ---
We kind of decided haphazardly to `basename` some of those strings and not
others. This was partly with some halfbaked notion of security in mind, to
avoid exposing path names on a server.
We should switch to full path names: basically just return everything in its
raw form: file names, archive names, names-from-archives. This would simplify
things, and making naming consistent between x-debuginfod-file: BASENAME and
the forthcoming metadata-query FULLPATH. And we can document how to strip
sensitive prefixes if admins want to keep things hush-hush.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 2+ messages in thread
* [Bug debuginfod/30962] ensure x-debuginfod-file / -archive headers always return full path names
2023-10-10 19:52 [Bug debuginfod/30962] New: ensure x-debuginfod-file / -archive headers always return full path names fche at redhat dot com
@ 2023-10-12 15:47 ` fche at redhat dot com
0 siblings, 0 replies; 2+ messages in thread
From: fche at redhat dot com @ 2023-10-12 15:47 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=30962
Frank Ch. Eigler <fche at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |FIXED
--- Comment #1 from Frank Ch. Eigler <fche at redhat dot com> ---
Author: Frank Ch. Eigler <fche@redhat.com>
Date: Tue Oct 10 16:21:00 2023 -0400
PR30962: debuginfod: full paths for X-DEBUGINFOD-FILE/ARCHIVE response
headers
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-10-12 15:47 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-10-10 19:52 [Bug debuginfod/30962] New: ensure x-debuginfod-file / -archive headers always return full path names fche at redhat dot com
2023-10-12 15:47 ` [Bug debuginfod/30962] " fche at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).