GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — [CVE-2024-4030] Enable `mkdir(mode=0o700)` to work on Windows · Issue #118486 · python/cpython

[CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows #118486

New issue
Copy link
New issue
Copy link
Closed
Closed
[CVE-2024-4030] Enable mkdir(mode=0o700) to work on Windows#118486
Copy link
Assignees
zooba
Labels
3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of lifeOS-windowstype-securityA security issueA security issue

Description

@zooba
zooba
opened on May 1, 2024
Issue body actions

If we interpret 0o700 as "only accessible by the current user", then we can imitate the behaviour with ACLs.

Linked PRs

  • gh-118486: Support mkdir(mode=0o700) on Windows #118488
  • gh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIGHTS instead of CURRENT_USER #118515
  • gh-118486: Update docs for CVE-2024-4030 reference #118737
  • [3.12] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118738
  • [3.11] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118739
  • [3.10] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118740
  • [3.9] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118741
  • [3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) #118742
  • [3.13] gh-118486: Update docs for CVE-2024-4030 reference (GH-118737) #118768
  • gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL #119056
  • [3.13] gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-119056) #119068
  • [3.12] gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-119056) #119069

Activity

Next
  1. zooba
    added
    OS-windows
    on May 1, 2024
  2. zooba
    self-assigned this
    on May 1, 2024
  3. zooba
    added 4 commits that reference this issue on May 1, 2024

    pythongh-118486: Support mkdir(mode=0o700) on Windows

    4bd91f2

    gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488)

    81939da

    pythongh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIG…

    77b83f4

    gh-118486: Switch mkdir(mode=0o700) on Windows to use OWNER RIGHTS in…

    8ed5466

  4. nineteendo commented on May 3, 2024

    @nineteendo
    nineteendo
    on May 3, 2024
    Contributor
    More actions

    Are you done here?

  5. zooba commented on May 3, 2024

    @zooba
    zooba
    on May 3, 2024
    MemberAuthor
    More actions

    No, not yet.

  6. zooba
    changed the title [-]Enable `mkdir(mode=0o700)` to work on Windows[/-] [+][CVE-2024-4030] Enable `mkdir(mode=0o700)` to work on Windows[/+] on May 7, 2024
  7. zooba
    added
    type-securityA security issueA security issue
    3.11only security fixesonly security fixes
    3.10 (EOL)end of lifeend of life
    3.9 (EOL)end of lifeend of life
    3.8 (EOL)end of lifeend of life
    3.12only security fixesonly security fixes
    on May 7, 2024

  8. 17 remaining items

  9. zooba
    added 5 commits that reference this issue on May 15, 2024

    pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…

    77ede7c

    pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…

    1946e26

    pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…

    c4b3f7a

    gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-1…

    e1dfa97

    gh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (GH-1…

    6d0850c
  10. ambv
    added 7 commits that reference this issue on May 24, 2024

    [3.11] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (G…

    35c799d

    Merge branch '3.10' into pythongh-118486-3.10

    49746a0

    Merge branch '3.9' into pythongh-118486-3.9

    8f0e88d

    Merge branch '3.8' into pythongh-118486-3.8

    18afc1f

    [3.10] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (G…

    c8f868d

    [3.9] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH…

    5130731

    [3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH…

    91e3669
  11. zooba
    closed this as completedon May 24, 2024
  12. estyxx
    added a commit that references this issue on Jul 17, 2024

    pythongh-118486: Simplify test_win32_mkdir_700 to check the exact ACL (…

    26483c7
  13. icanhasmath
    added a commit that references this issue on Oct 29, 2026

    3.7.17.x: docs: give backported changes 3.7.17.8 version notes

    aa21066
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @zooba
    zooba

Labels

3.10 (EOL)end of lifeend of life3.11only security fixesonly security fixes3.12only security fixesonly security fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of lifeOS-windowstype-securityA security issueA security issue

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.