On Wed, 7 Mar 2012 12:37:42 -0300 Gustavo Sverzut Barbieri <[email protected]> said:
> On Wed, Mar 7, 2012 at 6:05 AM, Enlightenment SVN > <[email protected]> wrote: > > Log: > > to be paranoid - ensure umask for mkstemp allows no other uids oir > > grps access. > > Ugh, isn't there any other way to do this? What you did break if > people are using other threads to open files, and if they fork() they > will inherit these values! TOO BAD :-( 1. umask is reset back immediately after creation so fork (unless its FROM another thread which is incredibly odd) wont be a problem 2. its changed for a very short period so yes - it could affect other threads creating files too but its a very small condition, but yes - its possible 3. no mk*temp libc funcs let u set mode so this is the only way other than creating our own tmpfile name allocator. NOT doing this makes for a security hole. i'd rather this very "rare/odd" bug than the security hole until someone spends the time to make a custom tmpfile creator. -- ------------- Codito, ergo sum - "I code, therefore I am" -------------- The Rasterman (Carsten Haitzler) [email protected] ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ enlightenment-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
