Mailing-List: contact docs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: docs@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 66.249.92.169 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=CYd/nFpJ/8Uu8YA+9KpPCCa0zzUzNegJZ7C1TKE0Wsj64tF3AZ6zIU8b4LRUrh17PJ
         uikAjhF1ymwMz30bxwm11PDrsEsPc35BVUEqeBY1yZAtoaRMeT3u1aLA2IbDaasb0ze2
         TEu0wltZWZaq8UlAQcys44bGSLjXe4vuKN9NM=
Message-ID: <1404e5910810010902y131f9ff4h233b71c445634082@mail.gmail.com>
Date: Wed, 1 Oct 2008 12:02:13 -0400
From: "Eric Covener" <covener@gmail.com>
To: docs@httpd.apache.org
Subject: Re: help for translation
In-Reply-To: <48E2BD46.9010206@lucid.net.au>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <48E0E604.9050607@lorraine.iufm.fr>
 <48E2BD46.9010206@lucid.net.au>

On Tue, Sep 30, 2008 at 7:59 PM, Jason Lingohr <jason@lucid.net.au> wrote:
> On 30/09/2008 12:28 AM, Lucien GENTIS wrote:
>> Hello to all,
>>
>> File trunk/manual/lod/core.xml - line 2298 about FollowSymLinks option.
>>
>> Could someone explain this sentence :
>>
>> "Omitting this option should not be considered a security restriction,
>> since symlink testing is subject to race conditions that make it
>> circumventable.
>>
>
> The second part reads ok to me -- buffer overrun or memory allocation
> exhaustion... but the "restriction" word seems odd.
>
> Should it perhaps be "should not be considered a security
> (benefit|enhancement),..."

Maybe "... security measure"

Re: the 2nd part, AIUI the window between checking that a path
component isn't a symlink then actually using the path component is
what this is referring to, not some potential corruption issue in the
server that would change the behavior.

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org