search

AlexandreHeroux / Fix-CVE-2021-44228

Apply class remove process from ear/war/jar/zip archive, see https://logging.apache.org/log4j/2.x/
6 stars 4 forks source link

checking permission #5

Open maxooo31 opened 2 years ago

maxooo31 commented 2 years ago

Hello,

With v1.0.0 & v1.0.1, could you add a check permission to modify file ?

I have tried to execute this command without sudo java -jar fix-CVE-2021-44228-1.0.0.jar /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles/

Starting scan of /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles Exception in thread "main" java.io.IOException: cannot fix /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles/org.apache.logging.log4j.core-2.11.2.jar at com.infinisolution.fix.BaseFix.scanArchive(BaseFix.java:70) at com.infinisolution.fix.BaseFix.scan(BaseFix.java:46) at com.infinisolution.fix.BaseFix.scan(BaseFix.java:43) at com.infinisolution.fix.BaseFix.run(BaseFix.java:32) at com.infinisolution.fix.cve202144228.FixCVE202144228.main(FixCVE202144228.java:24)

With sudo java -jar fix-CVE-2021-44228-1.0.0.jar /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles/ it is working : Number of fixed files 1 /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/Versions/A/itms/share/OSGi-Bundles/org.apache.logging.log4j.core-2.11.2.jar

AlexandreHeroux commented 2 years ago

You need Sudo right to execute, otherwise the program will not able to guaranty that everything have been proceed.