* Jason Tishler <Jason.Tishler@dothill.com> [010410 14:00] wrote:
> The following patch has been recently applied to Cygwin CVS:
>
> http://www.cygwin.com/ml/cygwin-patches/2001-q2/msg00006.html
>
> I hoping that someone knowledgeable in the area of PostgreSQL sockets
> communication can comment on whether or not this will really improve
> Cygwin PostgreSQL AF_UNIX socket security. Recall that Cygwin's AF_UNIX
> sockets are really implemented as AF_INET sockets. Specifically, I'm
> interested in whether or not the remaining sendto() and recvfrom() caveats
> minimize the effectiveness of this patch with regards to PostgreSQL.
If sendto/recvfrom aren't covered then there's most likely still some
problems with security.
--
-Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org]
Represent yourself, show up at BABUG http://www.babug.org/