Ticket #313 (accepted defect)

Opened 4 years ago

Last modified 2 years ago

single_instance_start: please bind on UNIX domain socket on systems that support them

Reported by: dam Owned by: ryan52
Priority: major Milestone:
Component: Single Instance Version: 0.35
Keywords: Cc: ryan52

Description

The single instance server binds on 127.0.0.1:4444 and then performs some tasks on demand without any authentication.

On multi-user systems this is a security breach. Please use UNIX domain socket (somewhere in user's home directory, protected with appropriate permissions) on systems that support it.

Thanks for considering.

Change History

comment:1 Changed 4 years ago by ryan52

  • Cc ryan52 added
  • Owner set to ryan52
  • Status changed from new to accepted

I'll take this ticket on. It looks like wxwidgets has support to do this the right way and this will be easy to do.

comment:2 Changed 4 years ago by azawawi

Ryan52, any update on this one?

comment:3 Changed 2 years ago by szabgab

  • Component changed from editor to Single Instance
Note: See TracTickets for help on using tickets.