"Path is outside SIP root" false positive #63

New issue

Closed

opened 2026-04-15 12:57:43 +00:00 by scossu · 0 comments

scossu commented

2026-04-15 12:57:43 +00:00

Owner

Following instructions on https://pkar-doc.knowledgetx.com/test_drive/ , inside a pre-packaged PKAR container:

pkar deposit /usr/local/lib/luarocks/rocks-5.4/pocket_archive/1.0.0rc-1/examples/sip/pkar_submission-postcard.csv

generates the "Path is outside SIP root" error. This error is generated by the path validation step that prevents ../ exploits, but it is clearly not behaving correctly here.

Conversely,

cd /usr/local/lib/luarocks/rocks-5.4/pocket_archive/1.0.0rc-1/examples/sip
pkar deposit pkar_submission-postcard.csv

works.

Amend documentation to use workaround.
Fix path check logic.

Following instructions on https://pkar-doc.knowledgetx.com/test_drive/ , inside a pre-packaged PKAR container: ``` pkar deposit /usr/local/lib/luarocks/rocks-5.4/pocket_archive/1.0.0rc-1/examples/sip/pkar_submission-postcard.csv ``` generates the "Path is outside SIP root" error. This error is generated by the path validation step that prevents `../` exploits, but it is clearly not behaving correctly here. Conversely, ``` cd /usr/local/lib/luarocks/rocks-5.4/pocket_archive/1.0.0rc-1/examples/sip pkar deposit pkar_submission-postcard.csv ``` works. - [x] Amend documentation to use workaround. - [x] Fix path check logic.