Brian Feldman b5f03b15f6 Fix EsounD daemon and library insecurities noted on BugTraq. ... Instead of an 0777 chock-full-o-races /tmp/.esd/, use a 0755 ~/.esd/. Also, the ~/.esd/socket of course needs only be 0644. Two macros had to be backed up by functions which returned a static buffer. These macros, ESD_UNIX_SOCKET_DIR and ESD_UNIX_SOCKET_NAME, both return constant strings as the new functions esd_unix_socket_dir() and esd_unix_socket_name(), so the static buffers are not particularly evil. The fix has been tested (without needing recompilation) by the most important EsounD-related apps, esd and XMMS, and works perfectly in both cases. It will be submitted to the EsounD maintainer to be fixed in the source distribution ASAP. Approved by: Security Officer Kris Noticed by: Stan Bubrouski <satan@FASTDIAL.NET>		2000-06-30 04:21:53 +00:00
..
patch-aa	Update to 0.2.15	1999-10-08 02:25:59 +00:00
patch-ab	Fix EsounD daemon and library insecurities noted on BugTraq.	2000-06-30 04:21:53 +00:00
patch-ac	Fix EsounD daemon and library insecurities noted on BugTraq.	2000-06-30 04:21:53 +00:00
patch-ad	Fix EsounD daemon and library insecurities noted on BugTraq.	2000-06-30 04:21:53 +00:00
patch-ae	Fix EsounD daemon and library insecurities noted on BugTraq.	2000-06-30 04:21:53 +00:00