Date: Fri, 10 Nov 2000 08:24:34 -0500 (EST) From: Robert Watson <rwatson@freebsd.org> To: Kris Kennaway <kris@citusc.usc.edu> Cc: audit@freebsd.org Subject: Re: mktemp() patch, again Message-ID: <Pine.NEB.3.96L.1001110082218.60481C-100000@fledge.watson.org> In-Reply-To: <20001104145247.A9161@citusc17.usc.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
I used to accept the idea of using varying case to increase the randomness space. In light of Mac OS X's case-preserving but case-insensitive file system, I think it would be wiser not to rely on case-independence. That said, I think the current patches are safe against that, since the file system takes care of the magic and informs you if you get a collision in the same way it does for a case-sensitive collision (O_EXCL), it just means that the effective string length still needs to be longer. Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1001110082218.60481C-100000>