Re: server stuff

[Dave Love]

"Stefan Monnier" <monnier+gnu/emacs/address@hidden> writes:

> I agree that $TMP or $TMPDIR should be obeyed in the same way
> as temporary-file-directory.

Actually, on consideration, that's wrong.  TMPDIR might not point to a
directory with the right semantics (local, sticky).  ssh-agent, for
instance, always uses /tmp.

> I believe that the creation of such sockets is atomic similarly
> to OCREAT (at least it failed when I tried it with a pre-existing socket),
> so I think it's safe.  But I must admit not knowing for sure.

That's not the issue.  I think you're supposed to create the socket in
a protected directory, which is what ssh and gnuserv do, at least.
I'm also unsure, but you'll get savaged on bugtraq if you make a
release which gets it wrong...

You might ask Florian Weimer, for instance, but someone like eggert
might know for sure if there isn't an actual security specialist on
the list.  Actually, Raeburn works on Kerberos, so he probably knows
about such things.

> You can pass a :version argument to define-minor-mode instead of
> calling (custom-add-version 'server-mode "21.4").

That's not documented and it doesn't seem to work.