Polyinstantiated /tmp
Matt McCutchen
matt at mattmccutchen.net
Sun Oct 31 19:07:10 UTC 2010
On Wed, 2010-10-20 at 08:13 -0400, Daniel J Walsh wrote:
> I have been trying to get system processes to stop using /tmp for years.
>
> http://danwalsh.livejournal.com/11467.html
>
> As some one who lives with polyinstatiated namespace /tmp, The only
> problem I know of now is handing of kerberos tickets. Whenever a system
> process (root) needs to communicate with a user via /tmp. namespace
> /tmp breaks it. sssd can not create kerberos tickets in my /tmp and
> gssd can not find my kerberos tickets in /tmp. I believe the solution
> to both is to move the tickets to be managed by sssd and leave /tmp to
> users.
>
> BTW, X has solved this problem a couple of years ago by using virtual
> namespace for its sockets.
In the abstract namespace, don't you have the same problem where if the
real X server dies for any reason, other users can create a socket at
the same path and mess with your applications?
--
Matt
More information about the devel
mailing list