Re: Security problems with access(2)?

[Warner Losh]

In message <[EMAIL PROTECTED]> Bill Moran writes:
: I'm a little confused here, if access() is such a serious security
: problem that it should _never_ be used, do we now have a major problem
: with a large amount of software in the base system?

Access(2) can be raced.  If you say access("fred") and then later open 
fread, between the two calls, fred may refer to different files and
you would be tricked into opening a file that you shouldn't have
otherwise opened.

Warner

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message