symlinks not scanning
See original GitHub issuesymlinks are no longer scanning.
steps to reproduce
mkdir test
wget 'https://repo1.maven.org/maven2/org/apache/logging/log4j/log4j-core/2.13.2/log4j-core-2.13.2.jar' -O test/test-vuln.jar
ln -s test test-symlink
./log4j2-scan test-symlink
finds 0 vulns
note: Scanner 1.7.0 (2021-12-17) did not have this problem. this is new regression.
Issue Analytics
- State:
- Created 2 years ago
- Comments:8 (5 by maintainers)
Top Results From Across the Web
Why doesn't my symbolic link work? - Super User
Symlinks tend to like full paths or relative to the link, otherwise they can often be looking for file-1.txt locally (oddly enough).
Read more >Won't follow symbolic links/symlinks · Issue #1168 - GitHub
There is no option to follow symlinks, but I just put up a diff which will follow symlinks by default now when scanning...
Read more >About scanning symbolic links - Kaspersky Knowledge Base
Scanning symbolic links in network attached storages typically occurs as follows. Kaspersky Security for Windows Server scans the file that the symbolic link...
Read more >Symlinks are not working after migration
Symlinks are not working after migration. ... It is discovered that some symlinks don't work only on Windows clients (using SMB).
Read more >Occ files:scan + symbolic link does not work anymore - Server
Hi,. Since the Owncloud last version 9.1, when i run occ files:scan command for synchronised a folder in symbolic link, the folder is...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Verified fixed with v2.6.0. Closing.
never mind, I understand what you mean now.
log4j2-scan
- will not follow sym linkslog4j2-scan /my/path
- will follow sym linkslog4j2-scan --no-symlink /my/path
- will not follow sym links