Quote:
Originally Posted by boriar
Is it posible to make a program for windows to do a check of all that?
I think will be a good tool for developers with experience and amateurs also to prevent things like that.
|
This sounds a little difficult. And what is "all that" that we should check for? I guess permissions. Under Windows the easy way to make a tar for our purpose is to use a file like 7-zip. If you do this, every file will be executable, a problem like yours cannot occur and there is no need to check the file permissions. Of course, the fact that "every" file is executable bears the danger that by some error in a script a file gets executed that was not intended for execution and causes damage.
If you therefore, choose to set the file permissions selectively, it is a little hard to check afterwards whether you did it correctly. One would have to read the starting bytes of every file in order to ascertain whether it is an ELF file or a script file (hoping that each script file identifies itself as being a script file). If one takes link files also into consideration ... Maybe there is another solution, but right now I cannot think of one.
And file permissions are not the only issue that can make a KoboRoot.tgz dangerous.