wineserver socket file and DOS attacks
Ove Kaaven
ovek at arcticnet.no
Wed Apr 30 23:45:46 CDT 2008
Maarten Lankhorst skrev:
> Wine checks ownership of the socket and directory, so race conditions
> aren't really a problem. This means that despite being put in a public
> directory there is no chance of a race condition. I don't see a
> security risk here, if someone is evil they could create that
> directory so wine wouldn't run, but that harm is only restricted to
> 'wine does not start'.
Which is exactly what the OP was concerned about.
More information about the wine-devel
mailing list