Re: Re: improving security of AF_UNIX sockets

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: egor duda <cygwin-patches(at)cygwin(dot)com>, Jason Tishler <Jason(dot)Tishler(at)dothill(dot)com>, Pgsql-Ports <pgsql-ports(at)postgresql(dot)org>
Subject: Re: Re: improving security of AF_UNIX sockets
Date: 2001-04-14 03:17:00
Message-ID: 12628.987218220@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-ports

Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> If there's no 'w' then connect() will fail with ECONNREFUSED on Linux 2.2.
> [ and several other systems document EACCES as the error code ]

FWIW: HPUX 10.20 doesn't document this error condition at all on the
connect(2) man page, but some quick experimentation shows that indeed
write access to the socket is necessary and sufficient to make a
connection. (And EACCES is what you get if you ain't got it.)

regards, tom lane

In response to

Browse pgsql-ports by date

  From Date Subject
Next Message Matthieu Guyonnet-Duluc 2001-04-14 08:41:54 running
Previous Message Peter Eisentraut 2001-04-14 02:08:26 Re: improving security of AF_UNIX sockets