Re: gpilotd & corba

On Wed, 16 Sep 1998, Michael Fulbright wrote:

> said:
> > 4) Currently, I'll store all requests as files /var/spool/gpilotd/
> > $USER/, and let the name/contents indicate what to do, and the forked
> > gpilotd will read these upon sync. (any security issues here that I'm
> > missing ?) 
> If this directory has a predictable name, cant some nasty person take
> advantage of this (like all the /tmp exploits recently discussed)?
> At a minimum I guess you just take a look at the existing path and make
> sure its really setup like you want before you use it.
> Dr Mike

I think that these dirs are writable only by the users.  I personally
think that we should use a directory in their home directory to avoid
quota problems.

Manish Vachharajani

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]