HI,

THere is a rather large local security problem with your use of unix sockets.  
It is very easy for a local hostile user to cause a denial of service, because 
you put the unix sockets in a world readable place with *very* predictable 
names.  They are so predictable because a the only thing that the attacker has 
to gues is the UID of the user, and because UID's for standard users start at 
1000, and are assigned in order, the attacker would only have to create say 100 
files, wich with a simple shell script is trivial.

Trev

-- 
Ubuntu-accessibility mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-accessibility

Reply via email to