Finally managed to create a jailed SFTP server, but how secure?

Brian Dessent brian@dessent.net
Wed Dec 3 14:08:00 GMT 2008


Eric Blake wrote:

> That's with /.  What about with \?  The cygwin dll sometimes treats the
> two separators differently, where using \ is more likely to bypass cygwin
> checks.

Don't forget the other variants, like

\\.\c:\foo\bar
\\./c:/foo/bar
\??\c:\foo\bar
\??/c:\foo\bar
\??/c:/foo/bar

Brian

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list