Re: Symlink vulnerabilities

[Andrew Farmer <andfarm () gmail com>]

On 2011-10-27, at 07:48, Valdis.Kletnieks () vt edu wrote:
> The other thing that people need to remember is that there's no race condition
> that's so small that you can't hit it.  If there's a race condition, it *can*
> be won.

And systems like inotify make filesystem races trivial to win. I wouldn't be surprised if you could win this particular 
race reliably by watching for the files bzexe drops and acting immediately when they show up.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/