Re: [sr-dev] [kamailio] multiple /tmp file vulnerabilities (#48)

On 24 Jan 2015, at 13:20, Victor Seva notifications@github.com wrote:

Changes I'm planning to do in the Debian packaging:

kamcmd defaults to connecting to unixs:/tmp/kamailio_ctl.

I'm going to change the default of ctl module to /var/run/kamailio/kamailio_ctl so kamcmd will use it by default and I'm going to set explicitly the binrpc parameter on the etc/kamailio/*.cfg files

The kamailio build definitely is vulnerable as can be seen in utils/kamctl/Makefile.

I'm going to use basedir Makefile config instead of /tmp

Is there a reason for not changing the Kamailio defaults?

/O

--- Reply to this email directly or view it on GitHub: https://github.com/kamailio/kamailio/issues/48#issuecomment-71324664