On Tue, 2007-10-16 at 15:00 -0700, Mark Logan wrote:

> >    3) how does this fit within secure-by-default?  Does the service 
> > listen only to IN_ADDR_ANY, or does it open up a port accessible to 
> > the entire network?
> I don't think it affects secure-by-default because it will only accept 
> connections from the local machine.

what's the actual access control and IPC mechanism here?  you can't
assume all local users are trusted, either.

                                - Bill


Reply via email to