[Users] [Bug 2828] Use MD5 digest for socket name
Holger Berndt
berndth at gmx.de
Fri Nov 30 01:00:22 CET 2012
On Do, 29.11.2012 16:01, Rich Pieri wrote:
>> That's in the eye of the beholder. XDG, for example, thinks such stuff
>> belongs into $XDG_RUNTIME_DIR, and thinking about it, I tend to agree.
>
>XDG usually uses a private directory under /tmp (commonly $TMPDIR as
>acquired from PAM).
It doesn't on my system.
>This is a perfectly valid way to do it. It should
>be easy for me to modify the patch to use
>/tmp/claws-mail-${UID}/${md5sum} for the per-configuration lock socket.
If it's to be per-user, it should just use XDG_RUNTIME_DIR.
But anyways, it's a matter of preference what's more valuable: Safety
against different uids trying to mess with the same config dir at the
same time, or DoS prevention. Personally, I lean towards the second.
Holger
More information about the Users
mailing list