James R Grinter wrote:
> 
> "David L. Nicol" <[EMAIL PROTECTED]> writes:
> > What exactly is the threat this is supposed to guard against?  Is
> > it directory descending on vms, or access to the .. directory somehow?
> 
> I think it's along the lines of something like 'user-/../foo@domain'
> which would naively search for '.qmail-/../foo'. Replacing '.' is an
> easy way to prevent it ever being possible.
> 
> James.


Yes, but dot appears so many places -- would not replacing slash
be a better solution?



-- 
                           David Nicol 816.235.1187 [EMAIL PROTECTED]
                            "people with fish eyes and brown socks"

Reply via email to