Skip to content

extractor: Don't restore user, group, SUID, SGID, nor sticky bit

Ondrej Holy requested to merge wip/oholy/suid into master

Restoring user, group, and unix mode might be problematic in terms of security. The libarchive's archive_write_disk API doesn't restore user, group, SUID, SGID, nor sticky bit by default for this reason. It also honors umask settings. Let's do the same here. If somebody needs that functionality in gnome-autoar, an extra flag needs to be added.

Related: https://bugzilla.redhat.com/show_bug.cgi?id=2231176

Merge request reports