[Bug-tar] GNUTYPE_NAMES dangerous

[Kees Cook]

Hello!

Due to a full-disclosure email, I opened the following bug in savanah: 
https://savannah.gnu.org/bugs/index.php?18355

I proposed a patch there to disable GNUTYPE_NAMES handling by default, 
adding an option "--allow-name-mangling" to re-enable it.  Since 
GNUTYPE_NAMES can't be created by tar any more, and it doesn't seem 
designed to allow for symlink creation delay, this seemed like a 
sensible solution.  

Thoughts on this?

Thanks!

-- 
Kees Cook