Re: Why you should avoid world-writable directories

[gonzo () IRONMAN PLANETQUAKE COM (Gonzo Granzeau)]

As noted from previous sendmail issues, two of the stated problems can be
solved by doing a correct disk structure.  You cannot create hard links across
across different partitions.  That way, if you have a /, /usr, /tmp, and a
/home, you should be okay if it drops it in tmp.  You'd basically have to
give their program it's own file system.  This still doesn't change the fact
that it is flawed, but if you are forced to use it...

What's really funny is how often programs with 'secure' in the title usually
have a few more security problems than normal... `8r)

gonzo
--
Gonzo Granzeau                     >  Nothing the god of biomechanics
gonzo () ironman planetquake com      <  won't let you into heaven for..
God, root, what's the difference...>       -Roy Batty, _Blade Runner_