Re: using access(2)

[Theo de Raadt]

> The manpage of access(2) says
> 
> CAVEATS
>       access() and faccessat() should never be used for actual access
>       control.  Doing so can result in a time of check vs. time of use
>       security hole.
> 
> However, access() is used in test(1):
> 
>       case FILRD:
>               return access(nm, R_OK) == 0;
>       case FILWR:
>               return access(nm, W_OK) == 0;
>       case FILEX:
>               return access(nm, X_OK) == 0;
>       case FILEXIST:
>               return access(nm, F_OK) == 0;
> 
> Is this a problem?

No.