google / google/rrg

Enforce root timeline paths to be absolute

Open
#148 1 comment 0 reactions 1 assignee Claimed by @panhania View on GitHub
Dominant language
Rust
Stars
70
Forks
34
Avg merge
1d 23h
Merged PRs (30d)
25

Description

We currently do [such enforcement][1] for the `get_file_metadata` action and the Python agent [does it][2] for the timeline action.

Without it we can leak agent working directory (which is rather harmless but better to avoid this if possible).

[1]: https://github.com/google/rrg/blob/7f8dd150f57dad2f5d97d777e15e4e961f3b7a02/crates/rrg/src/action/get_file_metadata.rs#L74-L79
[2]: https://github.com/google/grr/blob/9491bf2bd7875371fd0d99cc82cf10e072b311b7/grr/client/grr_response_client/client_actions/timeline.py#L75-L76

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.