Default libkrb5 ccache location
Simo Sorce
simo at redhat.com
Tue Jul 30 01:11:17 UTC 2013
On Tue, 2013-07-30 at 02:08 +0200, Lennart Poettering wrote:
> On Mon, 29.07.13 23:56, David Woodhouse (dwmw2 at infradead.org) wrote:
>
> > On Tue, 2013-07-30 at 00:50 +0200, Lennart Poettering wrote:
> > > So, why don't you revert to using /tmp then?
> >
> > The problem with /tmp is that if you want predictable filenames for the
> > storage, you open yourself to a denial-of-service attack where another
> > user can create a file with the same name.
>
> Well, but that's not unsurmountable, just pick a randomly named
> directory in /tmp and make sure to have a symlink:
>
> ln -s /tmp/krb.XXXXXX "$HOME/.krb-`cat /etc/machine-id`"
What would create this directory ?
> to give it a stable, machine-local name.
in what case /tmp contains non-'machine-local' files ?
Also I need one directory per-user and not per-machine.
And how is this different than /run/kerberos in the end ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the devel
mailing list