Re: Default libkrb5 ccache location

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2013-07-30 at 00:50 +0200, Lennart Poettering wrote:
> So, why don't you revert to using /tmp then?

The problem with /tmp is that if you want predictable filenames for the
storage, you open yourself to a denial-of-service attack where another
user can create a file with the same name.

It's really not that hard to create /run/kerberos and manage its
contents by deleting them when they expire. And it doesn't tie us into
anything permanent either; by the time the ccache moves for the *second*
time, everyone is already removing the hard-coded assumptions from their
code and just asking libkrb5 "where is it today?".

-- 
David Woodhouse                            Open Source Technology Centre
David.Woodhouse@xxxxxxxxx                              Intel Corporation

<<attachment: smime.p7s>>

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux