Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 31 Mar 2001 16:51:51 +0200
From:      Edwin Groothuis <edwin@mavetju.org>
To:        Bill Moran <wmoran@iowna.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: access() system call
Message-ID:  <20010331165151.J490@cgmd76206.chello.nl>
In-Reply-To: <3AC5EAFA.C8D4E301@iowna.com>; from wmoran@iowna.com on Sat, Mar 31, 2001 at 09:34:34AM -0500
References:  <3AC5EAFA.C8D4E301@iowna.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Mar 31, 2001 at 09:34:34AM -0500, Bill Moran wrote:
> In the man page for the access(2) syscall, it states "access() is a
> potential security hole and should never be used."
> 
> I have 3 questions regarding this:
> 
> 1. What should I use instead?

stat(2). It's in the SEE ALSO section of the man-page.

> 2. Is there any more information on why access() is such a terrible
> security hole?

I'm also wondering about it.

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                     http://FatalDimensions.nl.eu.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010331165151.J490>