Re: Security Anti Symlink Attack Patch for 2.1.71

Alan Cox (alan@lxorguk.ukuu.org.uk)
Sun, 7 Dec 1997 17:36:19 +0000 (GMT)


> The following patch was originaly for 2.0.32 by solar@false.com. I ported
> it to 2.1.71 and separated it from another patch that came with it.

This isnt a good fix in some ways. Firstly there are programs that depend upon
symlinks in /tmp, secondly it doesnt seem to agree with the unix standard.

Thats not to say it isnt a good toy to have around on an insecure box, but
it shouldnt be a standard thing.

Alan