elrond 2005/09/17 14:43:18 CEST
Modified files:
source/lib util_sock.c
Log:
You remember this?
*** Please someone examine create_pipe_socket and fix it ***
*** if used other than for exclusive root access ***
*** (see perms, which should be 0700 and 0600) ***
*** there is a race condition to be exploited. ***
Luke added it years ago.
A nice person asked me to review it finally.
So I did.
The code wasn't critical anymore anyway, as the directory
is now created in a root-writable space anyway. But it
should be safe enough anyway also.
If anybody considers moving this back to /tmp or somesuch,
let me know, so I review it for harder security. But
there's no point in doing so IMHO.
Revision Changes Path
1.36 +10 -8 tng/source/lib/util_sock.c
|
