lkml.org 
[lkml]   [2006]   [Apr]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH] Add a /proc/self/exedir link
    From
    Date
    Mike Hearn <mike@plan99.net> writes:

    > In practice most desktop apps use "prefix paths" to locate their own data
    > files. They don't usually send those file paths to other processes, not even in
    > the case of things like GIMP plugins.

    Programs that ssh to another machine and run commands are likely
    to send paths.

    >> IMO it's still best to just symlink the program directory to the correct place
    >> and make the programs search in e.g. ~/opt/ and /opt/.
    >
    > That also suffers from namespace conflicts ;)


    I looked at your original proposal some more and it fails
    miserably for shell scripts. Basically they all get / as
    their prefix, no matter where in the filesystem you put them.

    Also there is a very serious problem with suid exectuables.
    If a non privileged user has write access to the same filesystem
    the exectuables live on they can create a hard link to those
    files and change the prefix. Quite possibly getting the suid
    executables to trust a new set of exectuables.

    So this scheme appears to have many if not all of same security issues
    as private namespaces.

    Given that mostly it will be junior programmers packaging applications
    behind the backs of the authors of the code that will implement this
    scheme we could introduce all kinds of problems that no one will
    notice for quite a while.

    Eric
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-04-07 20:44    [W:0.021 / U:30.404 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site