#715483 incron: permission check too naive: doesn't work with ACLs

Package:
incron
Source:
incron
Description:
cron-like daemon which handles filesystem events
Submitter:
Leo 'costela' Antunes
Date:
2015-03-29 09:39:12 UTC
Severity:
normal
#715483#5
Date:
2013-07-09 14:27:07 UTC
From:
To:
Dear Maintainer,

incron's UserTable::MayAccess is too naive and reinvents the wheel when
checking permissions on a watched dir. Since it only manually checks for
uid/gid matching, it silently ignores folders that can actually be
accessed according to the set ACLs (thought it does warn about "access
denied" while reloading the incrontab).

For instance, the current handling of /media is done with per-user
subdirs which all belong to root:root, but get ACLs set appropriately
for the actual intended owner. This means incrontabs handling removable
media don't work. I'm not sure why /media gets handled like this, but
I hope you agree incron's inability to deal with ACLs is a problem regardless of this
particular case's merits.


Cheers