Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-2437 SYSCS_EXPORT_TABLE can be used to overwrite derby files
  3. DERBY-2925

Prevent export from overwriting existing files

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 10.1.2.1, 10.2.2.0, 10.3.1.4, 10.4.1.3
    • 10.3.1.4, 10.4.1.3, 10.6.2.1, 10.7.1.1
    • Tools
    • None
    • Release Note Needed
    • Security

    Description

      Export should not overwrite existing files, but rather insist that the user remove them before writing to the file. This will help prevent accidental or intentional corruption of the database with export. This may introduce a compatibility issue with export but because export is usually an attended utility and not typically invoked as part of an application, I think the risk is worth the additional security this will provide.

      Attachments

        1. DERBY-2925v0.diff
          6 kB
          Ramin Moazeni
        2. DERBY-2925v0.stat
          0.3 kB
          Ramin Moazeni
        3. DERBY-2925v1.diff
          45 kB
          Ramin Moazeni
        4. DERBY-2925v1.stat
          1.0 kB
          Ramin Moazeni
        5. DERBY-2925v2.diff
          57 kB
          Ramin Moazeni
        6. DERBY-2925v2.stat
          1 kB
          Ramin Moazeni
        7. DERBY-2925v3.diff
          68 kB
          Ramin Moazeni
        8. DERBY-2925v3.stat
          1 kB
          Ramin Moazeni
        9. releaseNotev0.html
          5 kB
          Ramin Moazeni
        10. DERBY-2925v4.diff
          3 kB
          Ramin Moazeni
        11. DERBY-2925v4.stat
          0.2 kB
          Ramin Moazeni
        12. DERBY-2925v5.diff
          1 kB
          Ramin Moazeni
        13. DERBY-2925v5.stat
          0.1 kB
          Ramin Moazeni
        14. DERBY-2925v6.diff
          3 kB
          Ramin Moazeni
        15. DERBY-2925v6.stat
          0.2 kB
          Ramin Moazeni
        16. releaseNote.html
          5 kB
          Richard N. Hillegas
        17. derby-2925-07-aa-fileUrl.diff
          5 kB
          Richard N. Hillegas

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. DERBY-2980 three test failed with 'java.security.AccessControlException

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. DERBY-4708 In the Administration Guide, clarify that you need to adjust file permissions in your security policy in order to prevent import/export from accessing sensitive files outside your Derby subsystem

          • Major - Major loss of function.
          • Closed

          Activity

            People

              moazeni Ramin Moazeni
              kmarsden Katherine Marsden
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: