|
| From: | Paul Eggert |
| Subject: | Re: emacsclient socket ownership |
| Date: | Fri, 2 Nov 2018 14:06:24 -0700 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 |
On 11/2/18 1:30 PM, Stefan Monnier wrote:
the attacker may have just put a symlink to some other socket that belongs to root but that really doesn't expect the kind of data emacsclient sends
We could refuse to follow symlinks, no? If that's not enough there are more drastic things to try.
| [Prev in Thread] | Current Thread | [Next in Thread] |