Re: Cygwin AF_UNIX socket security improvement patch

* Jason Tishler <Jason.Tishler@dothill.com> [010410 14:00] wrote:
> The following patch has been recently applied to Cygwin CVS:
>
>     http://www.cygwin.com/ml/cygwin-patches/2001-q2/msg00006.html
>
> I hoping that someone knowledgeable in the area of PostgreSQL sockets
> communication can comment on whether or not this will really improve
> Cygwin PostgreSQL AF_UNIX socket security.  Recall that Cygwin's AF_UNIX
> sockets are really implemented as AF_INET sockets.  Specifically, I'm
> interested in whether or not the remaining sendto() and recvfrom() caveats
> minimize the effectiveness of this patch with regards to PostgreSQL.

If sendto/recvfrom aren't covered then there's most likely still some
problems with security.

--
-Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org]
Represent yourself, show up at BABUG http://www.babug.org/