Re: [Ipsec-tools-commits] ipsec-tools/src/racoon admin.c,1.7,1.8 admin.h,1.5,1.6 admin_var.h,1.3,1.4 cfparse.y,1.22,1.23 cftoken.l,1.21,1.22 kmpstat.c,1.15,1.16 racoon.conf.5,1.14,1.15

[Derek A. <warlord@MIT.EDU>]

ma...@ne... (Emmanuel Dreyfus) writes:

> Aidas Kasparas <a.k...@gm...> wrote:
>
>> Call me paranoid, but I don't like default place for this file in 
>> world-writable directory. Even, if it was before in that place. This can
>> lead to security problems and MUST be changed IMHO.
>
> Yes, you are right.
>  
>> How about /var/racoon/adminsock or /var/spool/racoon/adminsock ?
>
> On NetBSD, /var/run would be the right place, but as it will differ on
> Linux, /var/racoon is probably better. 

No, on Linux /var/run is also the correct place, IMNSHO.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available