If a directory with a file is created in the session directory, the cleanup implementation of tl-xinit will fail to wipe the session directory. Current implementation is kind of shorthanded and a recursive delete of session directory would be more proper. See support issue 15162 for more info.
Fixed in r30656. Tester should make sure that there is no way to fool it into deleting things outside the session directory (except for bind mounts, which are undetectable per design). Tester should also verify that it doesn't halt on errors and only skips those files.
> > Tester should make sure that there is no way to fool it into deleting things > outside the session directory (except for bind mounts, which are undetectable > per design). > Verified code which check that files to be removed is on same filesystem as base directory. There is also a check that prevents recurse to work on symbolic linked directory. Looks good. > Tester should also verify that it doesn't halt on errors and only skips those > files. Verified that a cleaned out session directory only contains the files which the process failed to cleanup.
