[Users] [Bug 2828] Use MD5 digest for socket name

Holger Berndt berndth at gmx.de
Fri Nov 30 01:00:22 CET 2012

On Do, 29.11.2012 16:01, Rich Pieri wrote:

>> That's in the eye of the beholder. XDG, for example, thinks such stuff
>> belongs into $XDG_RUNTIME_DIR, and thinking about it, I tend to agree.
>XDG usually uses a private directory under /tmp (commonly $TMPDIR as
>acquired from PAM).

It doesn't on my system.

>This is a perfectly valid way to do it. It should
>be easy for me to modify the patch to use
>/tmp/claws-mail-${UID}/${md5sum} for the per-configuration lock socket.

If it's to be per-user, it should just use XDG_RUNTIME_DIR.

But anyways, it's a matter of preference what's more valuable: Safety
against different uids trying to mess with the same config dir at the
same time, or DoS prevention. Personally, I lean towards the second.


More information about the Users mailing list