You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@qpid.apache.org by "Aidan Skinner (JIRA)" <qp...@incubator.apache.org> on 2009/01/09 13:03:59 UTC

[jira] Assigned: (QPID-1563) AMQUserManagementMBean contains filesystem race condition

     [ https://issues.apache.org/jira/browse/QPID-1563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Aidan Skinner reassigned QPID-1563:
-----------------------------------

    Assignee: Rob Godfrey  (was: Aidan Skinner)

Please review

> AMQUserManagementMBean contains filesystem race condition
> ---------------------------------------------------------
>
>                 Key: QPID-1563
>                 URL: https://issues.apache.org/jira/browse/QPID-1563
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>            Reporter: Aidan Skinner
>            Assignee: Rob Godfrey
>
> saveAccessFile contains a classic temp file race condition which would concievably let a user with write permission to the configuration directory write or delete arbitary files as the broker by creating a symlink.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.