gnu-arch-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Gnu-arch-users] patch: clean up some cacherev mess


From: Alfred M\. Szmidt
Subject: Re: [Gnu-arch-users] patch: clean up some cacherev mess
Date: Wed, 23 Nov 2005 21:03:40 +0100

   > I think my keyword here was `something like'.  /tmp would be
   > hardcoded so such things cannot happen, and not links to be
   > followed, etc etc etc.

   Probably not going to happen. I read somewhere that if users are
   allowed to reap /tmp anytime at will, a malicious user can exploit
   some race condition in tmp file creation to do privilege
   escalation.

Could you dig up the article?  I can't see any reasons why it wouldn't
be utterly trivial to make such a program totally abuse safe.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]