help-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Relative imports.


From: Hans Deragon
Subject: Re: Relative imports.
Date: Mon, 08 Sep 2003 10:24:07 -0400
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20030225

Mark.Burgess@iu.hio.no wrote:
That's right. Either you need to give a full path or define the directory
in which the files should lie. This is the only security-conscious defensible
way of doing things.  Otherwise someone might be able to insert their
own config. Relative file names have no fixed meaning,

M

How can there be a security risk using relative file names? I am sure that this has been discussed before maybe many years ago, so a link to a thread or document explaining this will suffice.


Best regards,
Hans Deragon
--
Consultant en informatique/Software Consultant
Deragon Informatique inc.         Open source:
http://www.deragon.biz            http://swtmvcwrapper.sourceforge.net
mailto://hans@deragon.biz         http://autopoweroff.sourceforge.net





reply via email to

[Prev in Thread] Current Thread [Next in Thread]