| Ticket UUID: | b6496181dc34a4fc4f3f14a5bf8321ff2e9c5f26 | |||
| Title: | Support extracting all types in TAR files | |||
| Status: | Open | Type: | Feature Request | |
| Severity: | Important | Priority: | Medium | |
| Subsystem: | ofarc | Resolution: | Open | |
| Last Modified: | 2024-05-22 20:13:27 | |||
| Version Found In: | Milestone: | |||
| User Comments: | ||||
js added on 2021-07-04 16:39:48:
(text/x-markdown)
Currently, `ofarc` refuses to extract anything that is not a file or a directory. This is currently for security reasons, as otherwise a tar file could create a symlink `x -> /home/js` and then contain a file `x/.profile` to override my `/home/js/.profile` file. Many archivers have this security hole (in fact, I reported this to Apple a few years back, as their tar was vulnerable), so special care has to be taken here to avoid this. | ||||