Secure Programming for Linux and Unix HOWTO | ||
---|---|---|
<<< Previous | Validate All Input | Next >>> |
Programs must ensure that all inputs are controlled; this is particularly difficult for setuid/setgid programs because they have so many such inputs. Other inputs programs must consider include the current directory, signals, memory maps (mmaps), System V IPC, and the umask (which determines the default permissions of newly-created files). Consider explicitly changing directories (using chdir(2)) to an appropriately fully named directory at program startup.
<<< Previous | Home | Next >>> |
Web-Based Application Inputs (Especially CGI Scripts) | Up | Human Language (Locale) Selection |