Scan doesn't follow symlinks

sassoftware / loguccino

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

Apache License 2.0

34 stars 5 forks source link

Scan doesn't follow symlinks #10

Closed damcwa closed 2 years ago

damcwa commented 2 years ago

It seems like the scan option doesn't work if you specify a symlink. For example if I have the home path specified as /sso/sfw/sas/940M6 where 940M6 is a symlink to 940A, it appears to run but doesn't actually scan anything. If I run it directly on 940A it works as expected.

boomskats commented 2 years ago

This is intentional, as following symlinks could cause undesired behaviour (altering other filesystems, etc). Do you need an option implemented to follow symlinks?

damcwa commented 2 years ago

Well, at least in the remote managed environments I currently service it would be helpful to have an option. We do use them quite frequently.

boomskats commented 2 years ago

@damcwa I'm gonna close this one as a wontfix. If you feel it's still something worth working on let us know and we can reopen.