[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: emacsclient socket ownership

From: Paul Eggert
Subject: Re: emacsclient socket ownership
Date: Fri, 2 Nov 2018 14:06:24 -0700
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1

On 11/2/18 1:30 PM, Stefan Monnier wrote:
the attacker may have just put
a symlink to some other socket that belongs to root but that really
doesn't expect the kind of data emacsclient sends

We could refuse to follow symlinks, no? If that's not enough there are more drastic things to try.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]