I'm working on a quick little programming project for a client and ran
across this in the man page for access(2)
"Access() is a potential security hole and should never be used."
Obviously, I could use stat() instead, but use of access() will make
this project so simple it's not even funny.
Since that message is rather brief, I went looking for some more
information. In the source tree I found a number of programs that use
access() - including tcsh, sendmail and perl.
I'm a little confused here, if access() is such a serious security
problem that it should _never_ be used, do we now have a major problem
with a large amount of software in the base system?
Does anyone have a pointer to more detailed information on the potential
security hole in access()? I've got a bit more research to do on this,
but I'd appreciate any pointers to speed me along.
-Bill
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message