File permissions and security (was: Hylafax & filePro vs. Vsifax)

[Barry Wiseman]

----- Original Message ----- 
From: "Jay R. Ashworth" <jra at baylink.com>
To: "filepro-list" <filepro-list at seaslug.org>
Sent: Thursday, May 20, 2004 3:29 PM
Subject: Re: File permissions and security (was: Hylafax & filePro vs.
Vsifax)


> On Thu, May 20, 2004 at 02:41:18PM -0400, Barry Wiseman wrote:
> > Not to goad the dragon out of his lair, Mark, but on the systems I've
used,
> > umask 0 results in 0666, not 0777 -- still global read/write permission,
> > granted.  I know how commendably security minded you are, but balking at
> > global permission to a temp file that's about to be deleted in a few
> > milliseconds anyway, seems a bit much! :-)
> >
> > Would a "umask 033" satisfy you, assuming the data is not confidential?
> > Many users who are not ready to embark on group administration could
benefit
> > from a "safer" method of handing off files from filepro to other apps.
>
> If you are using a fixed target file name, it's a race condition issue,
> as much as a security one...

The OP's code looks to be generating a unique enough filename.