Yet another finger hole

David Jones JONESD at kcgl1.eng.ohio-state.edu
Sun Dec 4 08:42:34 AEST 1988


I think the proper way to defeat use of symbolic links for .plan files is
to have finger check that the file it opens is actually owned by the same
uid as the user whose plan file it is supposed to be.  This requires
actual coding changes to the program, however, so it's not a very
attractive solution.

David L. Jones               |      Phone:    (614) 292-6929
Ohio State Unviversity       |      Internet:
1971 Neil Ave. Rm. 406       |               jonesd at kcgl1.eng.ohio-state.edu
Columbus, OH 43210           |               jones-d at eng.ohio-state.edu



More information about the Comp.sys.sun mailing list