From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <87038489650152a926dc7a912f59429e@felloff.net>
Date: Thu,  2 Jan 2014 22:32:37 +0100
From: cinap_lenrek@felloff.net
To: 9fans@9fans.net
In-Reply-To: <6766a251d3bfab9c7a25cb0c2f17d1d9@brasstown.quanstro.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: Re: [9fans] devproc noteid changing for none
Topicbox-Message-UUID: ab3bd792-ead8-11e9-9d60-3106f5b1d025

a process running as "none" can only access its own (calling) process.

but noteid write allows it to change the noteid of its own process to
a nother group (also running as none) which allows it to send notes
to that group.

this has to be prevented.

--
cinap