Sorry for coming into this discussion rather late, but...
On Dec 23, 2008, at 5:10 PM, Nathaniel W Filardo wrote:
On Wed, Dec 24, 2008 at 12:53:06AM +0100, Francisco J Ballesteros
wrote:
You can post a fd at /srv for others to use
/srv is not an ideal answer, though it is the one I feared would be
given.
/srv allows any process running as a given user to access the posted
fd,
True. But why that should be a problem in practice? If the process
belongs
to a user X that means user X has control over it. Thus the behavior
of accidental consumption of an fd that was meant to be consumed by
some other process can only be attributed to bugs in the code, not
malicious
intent.
Thanks,
Roman.
