Re: [Xen-devel] Instant Xen guest (guest-magic tool)

[Gaurav Maheshbhai Patel <gmpatel@xxxxxxxxxxxxxxxxxxx>]

Thankyou very much steve,
Its very helpful. 
Gaurav

----- Original Message -----
From: Steve Kemp <steve@xxxxxxxxxxxx>
Date: Saturday, April 14, 2007 7:19 pm
Subject: Re: [Xen-devel] Instant Xen guest (guest-magic tool)
To: Gaurav Maheshbhai Patel <gmpatel@xxxxxxxxxxxxxxxxxxx>
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx

> On Sat, Apr 14, 2007 at 09:51:42AM -0500, Gaurav Maheshbhai Patel 
> wrote:
> > The comment on /tmp/guestmagic was really good.
> > I was wondering what if we use /tmp/$$ 
> > 
> > >     commands.getoutput('xm list > /tmp/$$')
> > 
> > Is it create the same problem as /tmp/guestmagic?
> 
>  Pretty much.  Process IDs are still *predictable* since they
> tend to be sequential under most systems.
> 
>  Still this is better than a static name.  You should really
> use a pipe.  If you can't then use a secure filename which
> can't be guessed by a local user.
> 
>  This is pretty off-topic for the xen list though, so I'll
> just suggest you look at the Secure Programming Howto:
> 
>    http://www.dwheeler.com/secure-programs/Secure-Programs-
> HOWTO/index.html
> Specifically the section on temporary files being used in 
> races.
> 
> Steve
> -- 
> 

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel