Triode;374786 Wrote: 
> So the issue that you are concerned about is someone overwriting the
> file and causing something else to be killed when the script exits?  We
> could probably protect against this by putting the file in the local
> users directory too.

Another common race condition attack is to make the target file
($apppid) a sym link to a more interesting file (server.prefs,
tracks.frm, favorites.opml, someplaylist.m3u, maybe even slimserver.pl)
so that "echo $! > $apppid" replaces the file's contents with a single
number. Using the home dir should be safe, too.

> As for the typo - will fix, but it probably just meant that you get one
> extra entry in the prefs file as a missing pref will be treated as
> undef and so equivalent to 0 and will get set the first time you set
> any prefs.

Hmm, OK. Well, it wasn't working so I tried toggling the pref in the
web UI and it didn't seem to "take" (if I went to another settings page
& then returned to the AlienBBC page, it was back to the default
setting.


-- 
peterw

http://www.tux.org/~peterw/
free plugins: http://www.tux.org/~peterw/#slim
AllQuiet BlankSaver ContextMenu FuzzyTime KidsPlay
KitchenTimer PlayLog PowerCenter/BottleRocket SaverSwitcher
SettingsManager SleepFade StatusFirst SyncOptions VolumeLock
------------------------------------------------------------------------
peterw's Profile: http://forums.slimdevices.com/member.php?userid=2107
View this thread: http://forums.slimdevices.com/showthread.php?t=57002

_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/lists/listinfo/plugins

Reply via email to