Re: Xcode 3.1 is available at connect.apple.com (Part 2b)
Re: Xcode 3.1 is available at connect.apple.com (Part 2b)
- Subject: Re: Xcode 3.1 is available at connect.apple.com (Part 2b)
- From: Jeff Johnson <email@hidden>
- Date: Sat, 12 Jul 2008 11:36:14 -0500
On Jul 11, 2008, at 11:30 PM, Chris Espinosa wrote: On Jul 11, 2008, at 5:42 PM, Jeff Johnson wrote: In Xcode 3.1 these caches have moved to a new location in /var/folders to provide enhanced security.
How exactly does this enhance security? If security is an issue, they ought to be in "~/Library/Caches", which is protected by FileVault encryption.
We are using a new system API, which other utilities like sample(1) are also using, to put files into directories that do not have identical paths on different machines. This deters (we're told) certain kinds of exploits. It is not a privacy or data-security issue, it's an exploit-prevention mechanism.
In such cases we tend to implement the Security team's requests.
Chris
A remote exploit for "/Library/Caches/com.apple.Xcode.503/SharedPrecompiledHeaders/Cocoa-byhqthbdzrfwhagxhifeykxwodun/Cocoa.h.gch"?
-Jeff
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden