TOCTTOU in File::Path::rmtree() Version 2.12 (continued 5)

• Nature of file system entry stored in $root can change between Time of Check and Time of Use

• We want to escalate permissions on a directory ...

  • ... but may end up escalating permissions on a key configuration file

• Security hole!