Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Leopard and Cache.db files



On Apr 22, 2008, at 10:21 AM, Eric Long wrote:

Why is WebKit storing Cache.db files in /private/var/folders?

Sorry to be pedantic: WebKit doesn't do disk caching at all. It's done by CFNetwork.


By default, CFNetwork stores caches in ~/Library/Caches, not in /var/ folders. And I'm sure if you look there you'll see them there.

The files in /var/folders seem to be caused by something different; on my computer I see what seem to be hard links to the CFNetwork caches in there, and many other files. Perhaps these have something to do with Time Machine?

I don't think there is a security issue here. So far all the files in / var/folders I've found have been inside folders with access at least as restrictive as the original location of the files. For examples, the -Caches- directory with what looks like hard links to files from my ~/Library/Caches is not accessible to anyone but me.

I doubt you'll find an expert on this in the WebKit mailing list.

If you find a specific example of a file that's exposed in a way that looks like a security issue, I suggest you file a bug at http://bugreport.apple.com -- it's guaranteed to get looked promptly at if it's marked "Security".

    -- Darin

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webkitsdk-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webkitsdk-dev/email@hidden

This email sent to email@hidden
References: 
 >Leopard and Cache.db files (From: Eric Long <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.