Skip site navigation (1) Skip section navigation (2)

Re: Cygwin AF_UNIX socket security improvement patch

From: Alfred Perlstein <bright(at)wintelcom(dot)net>
To: Pgsql-Ports <pgsql-ports(at)postgresql(dot)org>
Subject: Re: Cygwin AF_UNIX socket security improvement patch
Date: 2001-04-10 21:09:50
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-ports
* Alfred Perlstein <bright(at)wintelcom(dot)net> [010410 14:04] wrote:
> * Jason Tishler <Jason(dot)Tishler(at)dothill(dot)com> [010410 14:00] wrote:
> > The following patch has been recently applied to Cygwin CVS:
> > 
> >
> > 
> > I hoping that someone knowledgeable in the area of PostgreSQL sockets
> > communication can comment on whether or not this will really improve
> > Cygwin PostgreSQL AF_UNIX socket security.  Recall that Cygwin's AF_UNIX
> > sockets are really implemented as AF_INET sockets.  Specifically, I'm
> > interested in whether or not the remaining sendto() and recvfrom() caveats
> > minimize the effectiveness of this patch with regards to PostgreSQL.
> If sendto/recvfrom aren't covered then there's most likely still some
> problems with security.

Actually, since the code requires accept() to complete on the server
(knowledge of the key) it may work, your best bet it to simply try
it and let us know.

-Alfred Perlstein - [bright(at)wintelcom(dot)net|alfred(at)freebsd(dot)org]
Instead of asking why a piece of software is using "1970s technology,"
start asking why software is ignoring 30 years of accumulated wisdom.

In response to

pgsql-ports by date

Next:From: Jason TishlerDate: 2001-04-10 21:23:53
Subject: Cygwin PostgreSQL 7.1rc4 Announcement
Previous:From: Alfred PerlsteinDate: 2001-04-10 21:04:13
Subject: Re: Cygwin AF_UNIX socket security improvement patch

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group