Re: [Full-disclosure] Symlink vulnerabilities

[Andrew Farmer <andfarm@xxxxxxxxx>]

On 2011-10-27, at 07:48, Valdis.Kletnieks@xxxxxx wrote:
> The other thing that people need to remember is that there's no race condition
> that's so small that you can't hit it.  If there's a race condition, it *can*
> be won.

And systems like inotify make filesystem races trivial to win. I wouldn't be 
surprised if you could win this particular race reliably by watching for the 
files bzexe drops and acting immediately when they show up.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/