Bugtraq mailing list archives
Re: OSS nice tmp race
From: crispin () CSE OGI EDU (Crispin Cowan)
Date: Sun, 20 Dec 1998 22:53:09 +0000
Joel Eriksson wrote:
There are of course cases where it's not this easy to get rid of the need for a temporary file, the best way to fix this problem I think would be if all users had their own private tmp-directory. I have heard of patches that makes /tmp to a pseudo-directory that is "private" for each user that may be useful (I think it was for Linux, but I don't think it is widely spread). Since programmers keep repeating the old mistakes over and over again, the responsibility is ultimately the users. One can't check all of the sourcecode that we compile (at least not as thouroughly that may be needed), but eliminating the possibility of certain common bugs from having any dangerous implications is a first step. I think solutions like StackGuard and the like is of great use when it comes to this.
Thanks for the plug! Unfortunately, I haven't thought of any StackGuard-like techniques for treating race conditions. Matt Bishop's excellent paper on race condtions has some reasons why race conditions are un-decidable at the compiler level. Crispin ----- Crispin Cowan, Research Assistant Professor of Computer Science, OGI NEW: Protect Your Linux Host with StackGuard'd Programs :FREE http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/ Support Justice: Boycott Windows 98
Current thread:
- Irc: another funny stuff. In some irc clients dcc may be hijacked., (continued)
- Irc: another funny stuff. In some irc clients dcc may be hijacked. awgn () COSMOS IT (Dec 19)
- ValueClick CGI Vulnerability Philip Stoev (Dec 19)
- FTP.SODRE.NET Hacked... Eggdrop Modified.. Geoffrey Huntley (Dec 19)
- Re: FTP.SODRE.NET Hacked... Eggdrop Modified.. Matt Hallacy (Dec 19)
- ip header id patched. awgn () COSMOS IT (Dec 19)
- ValueClick Ellen (Dec 19)
- Re: OSS nice tmp race Pavel Kankovsky (Dec 18)
- Re: OSS nice tmp race Dr. Mudge (Dec 18)
- Re: OSS nice tmp race Joel Eriksson (Dec 18)
- OSS nice tmp race the razor of love (Dec 18)
- Re: OSS nice tmp race Crispin Cowan (Dec 20)
- Re: OSS nice tmp race X-Force (Dec 21)
- AOL client uses IP tunneling Aviram Jenik (Dec 21)
- Re: your mail Craig A. Huegen (Dec 21)
- Re: your mail Alan Cox (Dec 22)