This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-devel] Instant Xen guest (guest-magic tool)

Thankyou very much steve,
Its very helpful. 

----- Original Message -----
From: Steve Kemp <steve@xxxxxxxxxxxx>
Date: Saturday, April 14, 2007 7:19 pm
Subject: Re: [Xen-devel] Instant Xen guest (guest-magic tool)
To: Gaurav Maheshbhai Patel <gmpatel@xxxxxxxxxxxxxxxxxxx>
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx

> On Sat, Apr 14, 2007 at 09:51:42AM -0500, Gaurav Maheshbhai Patel 
> wrote:
> > The comment on /tmp/guestmagic was really good.
> > I was wondering what if we use /tmp/$$ 
> > 
> > >     commands.getoutput('xm list > /tmp/$$')
> > 
> > Is it create the same problem as /tmp/guestmagic?
>  Pretty much.  Process IDs are still *predictable* since they
> tend to be sequential under most systems.
>  Still this is better than a static name.  You should really
> use a pipe.  If you can't then use a secure filename which
> can't be guessed by a local user.
>  This is pretty off-topic for the xen list though, so I'll
> just suggest you look at the Secure Programming Howto:
>    http://www.dwheeler.com/secure-programs/Secure-Programs-
> HOWTO/index.html
> Specifically the section on temporary files being used in 
> races.
> Steve
> -- 

Xen-devel mailing list