Re: "orbit-<username>" dir in /tmp



On Fri, 2002-06-07 at 07:44, Michael Meeks wrote:
> Hi Jacob / Hema,
> 
> 	[ Havoc, the problem is of people maliciously creating 
> 	  /tmp/orbit-$USER directories to disrupt local Unix Domain 
> 	  socket communications ].
> 
> On Mon, 2002-06-03 at 18:56, jacob berkman wrote:
> > On Fri, 2002-05-31 at 09:20, Hema Seetharamaiah wrote:
> > > On Linux, this directory will stay across reboots until perhaps the user
> > > explicitly deletes it.
> > 
> > (this is not actually the case - some linux distributions clean /tmp on
> > reboot so you can potentially see this problem on linux also)
> 
> 	So - the problem exists; and I can see 2 possible solutions.

note that gnome-login-check is supposed to check for this...

 - jacob





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]