Re: Securing "make check" (CVE-2014-0067)

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: Securing "make check" (CVE-2014-0067)
Дата
Msg-id 20140303075021.GG12995@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: Securing "make check" (CVE-2014-0067)  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Noah Misch <noah@leadboat.com> writes:
> > Concerning the immediate fix for non-Windows systems, does any modern system
> > ignore modes of Unix domain sockets?  It appears to be a long-fixed problem:
>
> What I was envisioning was that we'd be relying on the permissions of the
> containing directory to keep out bad guys.  Permissions on the socket
> itself might be sufficient, but what does it save us to assume that?

Agreed- the general approach to this, from what I've seen, is to handle
it with the directory.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Securing "make check" (CVE-2014-0067)
Следующее
От: Fabien COELHO
Дата:
Сообщение: Re: gaussian distribution pgbench