On 08/07/2013 16:06, Dominique Dumont wrote:
> On Monday 08 July 2013 14:36:24 Jérémy Lal wrote:
>> I still do not understand if this is really a security issue.
>> IMO if a program on your system does that, the whole system is compromised,
>> you can't really be hardening any software against it.
> 
> A symlink attack is done by a user of a system against another user on the 
> same system. This is not a worry on your laptop, but may be an issue on a 
> bigger server in a data center

Thank you for the explanation.
Somehow I understood it was important and forwarded the bug upstream.

Jérémy.


_______________________________________________
Pkg-javascript-devel mailing list
Pkg-javascript-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to