wineserver socket file and DOS attacks

Ove Kaaven ovek at arcticnet.no
Wed Apr 30 23:45:46 CDT 2008


Maarten Lankhorst skrev:
> Wine checks ownership of the socket and directory, so race conditions
> aren't really a problem. This means that despite being put in a public
> directory there is no chance of a race condition. I don't see a
> security risk here, if someone is evil they could create that
> directory so wine wouldn't run, but that harm is only restricted to
> 'wine does not start'.

Which is exactly what the OP was concerned about.





More information about the wine-devel mailing list