On 20.07.2006 14:04, Joe Orton wrote:
> > I think it's a *very* bad idea to imply that SymLinksIfOwnerMatch is a > security feature. > > If you did want to call this a "security feature" then you also need to > fix the big fat race condition inbetween all those nice careful stat() > calls and the default handler going to open the file. Which I doubt > would be simple to say the least. This is true. > > I'd stay well clear of the word "security" here. I guess I can't change the log entry anymore. All I can do is adjust the CHANGES entry. Would that address your concerns? Regards Rüdiger
