[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Permissions for level files

Joey Hess writes:
> No, it might allow a cracker to get access to the account of another user
> who played rocksndiamonds. (By finding some buffer overflow in the
> level-reading code and constructing a level file that exploits it.)

Then no user should ever be allowed to write to any file that can read by
other users.
John Hasler
john@dhh.gt.org (John Hasler)
Dancing Horse Hill
Elmwood, WI

Reply to: