Groups > comp.lang.java.programmer > #29909

Re: java unix domain sockets ... or substitute

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	Nigel Wade <nmw@ion.le.ac.uk>
Newsgroups	comp.lang.java.programmer
Subject	Re: java unix domain sockets ... or substitute
Date	Thu, 04 Sep 2014 15:57:54 +0100
Lines	13
Message-ID	<c6rcvjF60t0U1@mid.individual.net> (permalink)
References	<slrnm0ejqn.fp3.avl@login.logic.tuwien.ac.at> <HI2dnY_1ser57pXJnZ2dnUVZ8m6dnZ2d@bt.com>
Mime-Version	1.0
Content-Type	text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net oE3GPO+7V7Qr1CJ8v72OZgzr2oCZrxbpVnWlWCqo88KPX3iQKS
Cancel-Lock	sha1:ah1Vwjwj56gnXcVRcRrWe4UdzZU=
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130329 Thunderbird/17.0.5
In-Reply-To	<HI2dnY_1ser57pXJnZ2dnUVZ8m6dnZ2d@bt.com>
Xref	csiph.com comp.lang.java.programmer:29909

Show key headers only | View raw

On 04/09/14 15:11, Chris Uppal wrote:
> If you must use Unix group permissions, then Nigel Wade's suggestion of having
> the server write a random number to a file that only it can write and only they
> can read, and using that for validation, seems adequate.  But note that that is
> vulnerable to network sniffing.

Network sniffing ought not to be much of a problem.

If the server only listens on the loopback interface then external exploitation shouldn't be possible. A normal user 
should not be able to sniff the lookback interface, so the attacker would need root access on the local host. If an 
attacker has root access then all bets are off, and protecting the app. server would be low on the list of priorities.

Thread

java unix domain sockets ... or substitute Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-03 17:26 +0000
  Re: java unix domain sockets ... or substitute Wayne <nospam@all.invalid> - 2014-09-03 13:36 -0400
    Re: java unix domain sockets ... or substitute Fredrik Jonson <fredrik@jonson.org> - 2014-09-04 07:42 +0000
    Re: java unix domain sockets ... or substitute Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-04 07:52 +0000
  Re: java unix domain sockets ... or substitute Josip Almasi <joe@vrspace.org> - 2014-09-04 09:45 +0200
    Re: java unix domain sockets ... or substitute Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-04 09:14 +0000
      Re: java unix domain sockets ... or substitute Josip Almasi <joe@vrspace.org> - 2014-09-05 10:20 +0200
  Re: java unix domain sockets ... or substitute Fredrik Jonson <fredrik@jonson.org> - 2014-09-04 08:34 +0000
    Re: java unix domain sockets ... or substitute Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-05 01:06 +0000
  Re: java unix domain sockets ... or substitute Nigel Wade <nmw@ion.le.ac.uk> - 2014-09-04 11:35 +0100
  Re: java unix domain sockets ... or substitute "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-09-04 15:11 +0100
    Re: java unix domain sockets ... or substitute Nigel Wade <nmw@ion.le.ac.uk> - 2014-09-04 15:57 +0100
      Re: java unix domain sockets ... or substitute "Chris Uppal" <chris.uppal@metagnostic.REMOVE-THIS.org> - 2014-09-04 16:21 +0100
        Re: java unix domain sockets ... or substitute Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-05 10:55 +0000
  Re: java unix domain sockets ... or substitute (SOLVED) Andreas Leitgeb <avl@auth.logic.tuwien.ac.at> - 2014-09-05 00:53 +0000
    Re: java unix domain sockets ... or substitute (SOLVED) Josip Almasi <joe@vrspace.org> - 2014-09-05 10:23 +0200

csiph-web