Re: Cygwin AF_UNIX socket security improvement patch

* Alfred Perlstein <bright(at)wintelcom(dot)net> [010410 14:04] wrote:
> * Jason Tishler <Jason(dot)Tishler(at)dothill(dot)com> [010410 14:00] wrote:
> > The following patch has been recently applied to Cygwin CVS:
> >
> > http://www.cygwin.com/ml/cygwin-patches/2001-q2/msg00006.html
> >
> > I hoping that someone knowledgeable in the area of PostgreSQL sockets
> > communication can comment on whether or not this will really improve
> > Cygwin PostgreSQL AF_UNIX socket security. Recall that Cygwin's AF_UNIX
> > sockets are really implemented as AF_INET sockets. Specifically, I'm
> > interested in whether or not the remaining sendto() and recvfrom() caveats
> > minimize the effectiveness of this patch with regards to PostgreSQL.
>
> If sendto/recvfrom aren't covered then there's most likely still some
> problems with security.

Actually, since the code requires accept() to complete on the server
(knowledge of the key) it may work, your best bet it to simply try
it and let us know.

--
-Alfred Perlstein - [bright(at)wintelcom(dot)net|alfred(at)freebsd(dot)org]
Instead of asking why a piece of software is using "1970s technology,"
start asking why software is ignoring 30 years of accumulated wisdom.