On Fri, Feb 6, 2015 at 2:02 PM, Simon McVittie <
[email protected]> wrote:

> On 06/02/15 03:32, 张洋 wrote:
>
>> dbus-daemon --session --print-address --fork > /tmp/session_amgr
>>
>
> This is a security flaw (the search keywords to look for are "symlink
> attack").
>

True, although systemd sets fs.protected_symlinks=1 by default, which
should guard against that.

-- 
Mantas Mikulėnas <[email protected]>
_______________________________________________
systemd-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to