On 8/3/2016 5:43 AM, dulanja mallikarachchi wrote:
Hi All,
When a database is created, two files are created inside "log" and "seg0"
folders. These files can replaced with other files. Thus database is open to vulnerabilities.
If we can restrict access to the above mentioned folders, we can get rid of
this vulnerability.
Thank you.
Thank you for looking into this.
What you describe sounds quite similar to DERBY-5363:
https://issues.apache.org/jira/browse/DERBY-5363
Perhaps you could describe your issue in more detail, and
describe how you think it relates to the work done on DERBY-5363.
I.e.,
- do you think that DERBY-5363 has regressed?
- do you think that the fix for DERBY-5363 was inadequate?
- do you think that you are seeing a different issue entirely?
thanks,
bryan
