Re: Cygwin AF_UNIX socket security improvement patch

* Jason Tishler <Jason(dot)Tishler(at)dothill(dot)com> [010410 14:00] wrote:
> The following patch has been recently applied to Cygwin CVS:
>
> http://www.cygwin.com/ml/cygwin-patches/2001-q2/msg00006.html
>
> I hoping that someone knowledgeable in the area of PostgreSQL sockets
> communication can comment on whether or not this will really improve
> Cygwin PostgreSQL AF_UNIX socket security. Recall that Cygwin's AF_UNIX
> sockets are really implemented as AF_INET sockets. Specifically, I'm
> interested in whether or not the remaining sendto() and recvfrom() caveats
> minimize the effectiveness of this patch with regards to PostgreSQL.

If sendto/recvfrom aren't covered then there's most likely still some
problems with security.

--
-Alfred Perlstein - [bright(at)wintelcom(dot)net|alfred(at)freebsd(dot)org]
Represent yourself, show up at BABUG http://www.babug.org/