Default libkrb5 ccache location
Lennart Poettering
mzerqung at 0pointer.de
Tue Jul 30 00:08:36 UTC 2013
On Mon, 29.07.13 23:56, David Woodhouse (dwmw2 at infradead.org) wrote:
> On Tue, 2013-07-30 at 00:50 +0200, Lennart Poettering wrote:
> > So, why don't you revert to using /tmp then?
>
> The problem with /tmp is that if you want predictable filenames for the
> storage, you open yourself to a denial-of-service attack where another
> user can create a file with the same name.
Well, but that's not unsurmountable, just pick a randomly named
directory in /tmp and make sure to have a symlink:
ln -s /tmp/krb.XXXXXX "$HOME/.krb-`cat /etc/machine-id`"
to give it a stable, machine-local name. That's more or less what
PulseAudio did in absence of XDG_RUNTIME_DIR in order not to be
vulnerable to namespace attacks but still having a stable, machine-local
place to put runtime objects.
Lennart
--
Lennart Poettering - Red Hat, Inc.
More information about the devel
mailing list