fix(install): follow symlink components in destination path with -D by abendrothj · Pull Request #11505 · uutils/coreutils

abendrothj · 2026-03-26T11:00:06Z

Summary

install -D was replacing pre-existing symlinks in the destination path with real directories instead of following them. This broke any workflow where part of the install prefix is a symlink; including BOSH deployments, Homebrew, Nix, stow, and any make install targeting a symlinked prefix.

Reproduction (from the issue):

mkdir -p /tmp/target
ln -s /tmp/target /tmp/link
echo hello > /tmp/file.txt
install -D -m 644 /tmp/file.txt /tmp/link/subdir/file.txt
# GNU coreutils 8.32: /tmp/link stays a symlink, file lands in /tmp/target/subdir/file.txt
# uutils 0.7.0:       /tmp/link is replaced with a real directory — wrong

Root cause

PR #10140 introduced create_dir_all_safe() in safe_traversal.rs to prevent TOCTOU symlink race conditions. The fix was correct in intent but too aggressive: open_or_create_subdir() unconditionally unlinked and recreated any symlink it encountered, including pre-existing legitimate ones.

Changes

src/uucore/src/lib/features/safe_traversal.rs

open_or_create_subdir: when stat_at returns S_IFLNK, call open_subdir(Follow) instead of unlink_at + mkdir_at. The O_DIRECTORY flag already in open_subdir means dangling or non-directory symlinks still return an error cleanly.
find_existing_ancestor: switch from fs::symlink_metadata to fs::metadata so that a symlink-to-directory is recognised as an existing ancestor rather than a component to recreate (this was already the stated intent in the function's doc comment).

src/uu/install/src/install.rs

Align the dir_exists check and the DirFd::open call to also follow symlinks, consistent with the above.

tests/by-util/test_install.rs

Update the two tests added by fix(install): prevent symlink race condition in install -D (fixes #10013) #10140 — they were asserting the buggy behavior (symlink replaced). Flip the assertions to document the correct GNU behavior.
Add test_install_d_follows_symlink_prefix as a direct regression test for the issue's reproduction case.

TOCTOU / security note

The true TOCTOU race (a symlink injected during the operation into a not-yet-existing path component) is still blocked: mkdirat fails with EEXIST if an attacker creates a symlink between stat_at returning ENOENT and our mkdir_at. Newly-created directories are still opened with O_NOFOLLOW.

What changes is that pre-existing symlinks are now followed — which is exactly what GNU coreutils 8.32 does. The previous behavior was stricter than GNU in this regard.

github-actions · 2026-03-26T11:30:22Z

GNU testsuite comparison:

GNU test failed: tests/timeout/timeout-group. tests/timeout/timeout-group is passing on 'main'. Maybe you have to rebase?
Note: The gnu test tests/seq/seq-epipe is now being skipped but was previously passing.
Congrats! The gnu test tests/cp/link-heap is now passing!
Note: The gnu test tests/misc/write-errors was skipped on 'main' but is now failing.

codspeed · 2026-03-26T11:41:42Z

Merging this PR will not alter performance

✅ 319 untouched benchmarks
⏩ 46 skipped benchmarks¹

_{Comparing abendrothj:fix/install-d-follow-symlinks (dbe8864) with main (19c7f64)}

46 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

github-actions · 2026-03-26T20:44:22Z

GNU testsuite comparison:

GNU test failed: tests/misc/io-errors. tests/misc/io-errors is passing on 'main'. Maybe you have to rebase?
Skip an intermittent issue tests/cut/bounded-memory (fails in this run but passes in the 'main' branch)
Skipping an intermittent issue tests/pr/bounded-memory (passes in this run but fails in the 'main' branch)
Note: The gnu test tests/tail/tail-n0f is now being skipped but was previously passing.

github-actions · 2026-03-28T12:12:50Z

GNU testsuite comparison:

Skipping an intermittent issue tests/date/date-locale-hour (passes in this run but fails in the 'main' branch)
Skipping an intermittent issue tests/date/resolution (passes in this run but fails in the 'main' branch)
Note: The gnu test tests/tail/tail-n0f is now being skipped but was previously passing.

zhw2101024 · 2026-04-22T11:19:05Z

The test fails in the mkfifo test, anyway hope this PR can be merged, and the related issue not left to the next released uutils.

abendrothj · 2026-04-22T19:46:50Z

The test fails in the mkfifo test, anyway hope this PR can be merged, and the related issue not left to the next released uutils.

agreed. seems like flakiness, since mkfifo is unrelated.

github-actions · 2026-04-22T19:53:55Z

GNU testsuite comparison:

Skip an intermittent issue tests/cut/bounded-memory (fails in this run but passes in the 'main' branch)
Skip an intermittent issue tests/tail/tail-n0f (fails in this run but passes in the 'main' branch)
Note: The gnu test tests/tail/pipe-f is now being skipped but was previously passing.

install -D was replacing pre-existing symlinks in the destination path with real directories instead of following them, breaking any workflow where part of the install prefix is a symlink (BOSH, Homebrew, Nix, stow, `make install` with a symlinked prefix).

Ecordonnier · 2026-05-25T20:13:20Z

Thanks. I've merged the branch and will add the cosmetic changes in a follow-up PR. This should be merged ASAP since it is a critical fix.

uutils install 0.8.0 as used in Ubuntu 26.04 has a bug in the install applet, breaking a number of packages: uutils/coreutils#11505 https://bugs.launchpad.net/ubuntu/+source/rust-coreutils/+bug/2151454 The fix has been merged upstream but not yet released or packaged in Ubuntu, so detect and reject the buggy version and explain how to change to the coreutils version. Once fixed the version output will hopefully change. For simplicity, only check for the exact 0.8.0 version string. Hopefully when it is fixed in Ubuntu, they also update the version string. Note that earlier versions of uutils have the same issue of course, but those versions were never the default "install" on Ubuntu (or anywhere else). Signed-off-by: Peter Korsgaard <[email protected]> Signed-off-by: Arnout Vandecappelle <[email protected]>

uutils install 0.8.0 as used in Ubuntu 26.04 has a bug in the install applet, breaking a number of packages: uutils/coreutils#11505 https://bugs.launchpad.net/ubuntu/+source/rust-coreutils/+bug/2151454 The fix has been merged upstream but not yet released or packaged in Ubuntu, so detect and reject the buggy version and explain how to change to the coreutils version. Once fixed the version output will hopefully change. For simplicity, only check for the exact 0.8.0 version string. Hopefully when it is fixed in Ubuntu, they also update the version string. Note that earlier versions of uutils have the same issue of course, but those versions were never the default "install" on Ubuntu (or anywhere else). Signed-off-by: Peter Korsgaard <[email protected]> Signed-off-by: Arnout Vandecappelle <[email protected]> (cherry picked from commit 64cb69f) Signed-off-by: Thomas Perale <[email protected]>

abendrothj force-pushed the fix/install-d-follow-symlinks branch from 9c7f91a to 4fc3ac8 Compare March 26, 2026 11:13

abendrothj force-pushed the fix/install-d-follow-symlinks branch 2 times, most recently from ebc0ba6 to cd070c4 Compare March 26, 2026 20:34

abendrothj force-pushed the fix/install-d-follow-symlinks branch from cd070c4 to ed62194 Compare March 28, 2026 12:03

oech3 mentioned this pull request May 6, 2026

install: on a file install breaks usrmerge on ubuntu 26.04 #12166

Closed

eyupcanakman mentioned this pull request May 21, 2026

install: fix EEXIST race losing files in parallel install -D #12429

Merged

Ecordonnier force-pushed the fix/install-d-follow-symlinks branch from 93383c7 to dbe8864 Compare May 24, 2026 20:03

Ecordonnier self-requested a review May 24, 2026 20:05

Ecordonnier reviewed May 24, 2026

View reviewed changes

Comment thread src/uucore/src/lib/features/safe_traversal.rs Resolved

Comment thread src/uucore/src/lib/features/safe_traversal.rs Resolved

Comment thread src/uucore/src/lib/features/safe_traversal.rs Resolved

Comment thread tests/by-util/test_install.rs Resolved

Ecordonnier merged commit 21fda8c into uutils:main May 25, 2026
172 of 173 checks passed

zhw2101024 mentioned this pull request May 26, 2026

install: ancestors_mode_directories_with_file test fails with user with umask other than 022 #11363

Closed

moonfruit mentioned this pull request May 31, 2026

uutils-selected 0.9.0 moonfruit/homebrew-tap#652

Closed

abendrothj deleted the fix/install-d-follow-symlinks branch October 1, 2026 06:52

Navigation Menu

Repository navigation

fix(install): follow symlink components in destination path with -D - #11505

fix(install): follow symlink components in destination path with -D#11505
Ecordonnier merged 1 commit into
uutils:mainfrom
abendrothj:fix/install-d-follow-symlinks

abendrothj commented Mar 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 26, 2026

Uh oh!

codspeed Bot commented Mar 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 26, 2026

Uh oh!

github-actions Bot commented Mar 28, 2026

Uh oh!

zhw2101024 commented Apr 22, 2026

Uh oh!

abendrothj commented Apr 22, 2026

Uh oh!

github-actions Bot commented Apr 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Ecordonnier commented May 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

abendrothj commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Root cause

Changes

TOCTOU / security note

Uh oh!

github-actions Bot commented Mar 26, 2026

Uh oh!

codspeed Bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will not alter performance

Footnotes

Uh oh!

github-actions Bot commented Mar 26, 2026

Uh oh!

github-actions Bot commented Mar 28, 2026

Uh oh!

zhw2101024 commented Apr 22, 2026

Uh oh!

abendrothj commented Apr 22, 2026

Uh oh!

github-actions Bot commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Ecordonnier commented May 25, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

abendrothj commented Mar 26, 2026 •

edited

Loading

codspeed Bot commented Mar 26, 2026 •

edited

Loading

github-actions Bot commented Apr 22, 2026 •

edited

Loading