lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Lynx-dev] 2-8-7r4 LYUtils.c won't find ~/.mailcap


From: gilmap
Subject: Re: [Lynx-dev] 2-8-7r4 LYUtils.c won't find ~/.mailcap
Date: Tue, 20 Feb 2007 06:48:08 -0700 (MST)

In a recent note, Rado S said:

> Date: Tue, 20 Feb 2007 14:25:57 +0100
> 
> =- Thomas Dickey wrote on Tue 20.Feb'07 at  7:50:54 -0500 -=
> 
> > ok.  Then if I made it do a readlink, the code would find that the
> > result is still in your own directory, and it could recur to run the
> > check on the link's target.  That sounds reasonable - I simply hadn't
> > thought of symlinks when I modified HTInit.c to use IsOurFile().
> 
For an alternate (and perhaps easier to implement) approach,
I believe an intermediate security setting in Apache permits
following symlinks only when the link and its target have
the same owner: lstat(); stat(); compare owner.

-- gil
-- 
StorageTek
INFORMATION made POWERFUL




reply via email to

[Prev in Thread] Current Thread [Next in Thread]