[Bug 19668] sgid problem

[bugzilla-daemon at bugzilla.ubuntu.com]

Please do not reply to this email.  You can add comments at
http://bugzilla.ubuntu.com/show_bug.cgi?id=19668
Ubuntu | gnome-games





------- Additional Comments From martin.pitt at ubuntu.com  2005-12-15 10:08 UTC -------
(In reply to comment #12)
> What do you all think about making the high score files world-writable in the
> mean time. Sure, you could cheat, but IMHO it's just games anyways... :-)

No, please do not do this. World writeable files are a pain and should generally
be forbidden.

Allowing everybody to write arbitrary data into highscores opens up a giant
attack vector for exploiting buffer overflows and other unchecked inputs in
these games. (Let alone the obvious DoS by just writing insanely big files).

-- 
Configure bugmail: http://bugzilla.ubuntu.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.