From: Eric Hodel <drbrain@...7.net>
Date: 2006-03-24T17:42:58+09:00
Subject: Re: [ANN] socket_sendfile

On Mar 23, 2006, at 7:24 PM, ara.t.howard@noaa.gov wrote:

> i'm just about to write a server which sends 1-3gb images as the  
> response...
> this could be quite useful.
>
> one gripe.  it doesn't work:
>
>   /home/ahoward is insecure (40777), needs 0700 for perms. Exiting
>
> i work in a collaborative lab... all our home dirs are group  
> readable by
> default.

Your home dir is group and world writable.  A 755 directory works,  
the message is broken.  (Well, just fixed in perforce.)

> any way to adjust this?  an env var perhaps?

The INLINEDIR environment variable controls this, so set it to a  
directory that's got the right permissions (at least 755).

> seems like this should just warn.

Other people may be able to inject code into ~/.ruby_inline if the  
directory is writeable by other people than you.

That would be Really Bad.

A warning is insufficient.  You would be royally screwed by the time  
you read it.

-- 
Eric Hodel - drbrain@segment7.net - http://blog.segment7.net
This implementation is HODEL-HASH-9600 compliant

http://trackmap.robotcoop.com