[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Permissions for level files



Joey Hess writes:
> No, it might allow a cracker to get access to the account of another user
> who played rocksndiamonds. (By finding some buffer overflow in the
> level-reading code and constructing a level file that exploits it.)

Then no user should ever be allowed to write to any file that can read by
other users.
-- 
John Hasler
john@dhh.gt.org (John Hasler)
Dancing Horse Hill
Elmwood, WI


Reply to: