From ba0bb9e7fd64765b6ee3f2b9f72b35c8527f730a Mon Sep 17 00:00:00 2001 From: Hans de Goede Date: Mon, 1 Nov 2010 13:34:02 +0100 Subject: [PATCH] vdagentd: change socket name Having a Unix Domain Socket directly under /tmp is a really bad idea (think symlink attacks). The standard solution for this is to create a subdir under /tmp. But since spice-vdagentd runs as root anyways we might just as well put it in another much safer place. So now the socket is: /var/run/spice-vdagentd/spice-vdagent-sock --- vdagentd-proto.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vdagentd-proto.h b/vdagentd-proto.h index 375b324..0f3c478 100644 --- a/vdagentd-proto.h +++ b/vdagentd-proto.h @@ -23,7 +23,7 @@ #ifndef __VDAGENTD_PROTO_H #define __VDAGENTD_PROTO_H -#define VDAGENTD_SOCKET "/tmp/spice-vdagent" +#define VDAGENTD_SOCKET "/var/run/spice-vdagentd/spice-vdagent-sock" enum { VDAGENTD_GUEST_XORG_RESOLUTION, /* client -> daemon */ -- 2.11.4.GIT