OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: so, just how many library environment variables can specify filnames????? (was: Addition to force open to open only regular files)
From: Andrew Brown (atatatatatdot.net)
Date: Tue Nov 21 2000 - 13:02:01 CST

>Clearly until and unless open_as() [or something equivalent] is
>implemented and available it is simply not safe to allow arbitrary
>filenames to be used from $TZ at all.

would the implementation of open_as() depend on the program knowing
what the real uid was (had been) or would i depend on the kernel
knowing? 

-- 
|-----< "CODE WARRIOR" >-----|
codewarriordaemon.org             * "ah!  i see you have the internet
twofsonetgraffiti.com (Andrew Brown)                that goes *ping*!"
andrewcrossbar.com       * "information is power -- share the wealth."