Filesystems and case-insensitivity

Posted Nov 29, 2018 15:57 UTC (Thu) by zdzichu (subscriber, #17118)
In reply to: Filesystems and case-insensitivity by alonz
Parent article: Filesystems and case-insensitivity

I guess name-as-provided is for displaying in user interface?

% getfattr --name=user.name-as-provided malware.sh 
# file: malware.sh
user.name-as-provided="Safe.pdf"

Posted Nov 29, 2018 18:34 UTC (Thu) by smurf (subscriber, #17840) [Link]

Well, that's easy enough to fix – verify that the xattr matches the filename before using it.

A non-malicious source of the same problem is somebody renaming the file with an old non-extended-filename-compatible tool (or libc).