Received: from SOUTH-STATION-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA01234; Wed, 20 Dec 95 05:06:29 EST
Received: from franklin.sdsc.edu by MIT.EDU with SMTP
	id AA09902; Wed, 20 Dec 95 05:06:14 EST
Received: from galt.sdsc.edu (galt.sdsc.edu [132.249.22.111]) by franklin.sdsc.edu (8.6.11/SDSCserver-7) with SMTP id CAA18822 for <krb5-bugs@mit.edu>; Wed, 20 Dec 1995 02:06:19 -0800
From: Andrew Gross <grossa@SDSC.EDU>
Received: by galt.sdsc.edu (4.1/1.11-client)
	id AA18068; Wed, 20 Dec 95 02:06:37 PST
Date: Wed, 20 Dec 95 02:06:37 PST
Message-Id: <9512201006.AA18068@galt.sdsc.edu>
To: krb5-bugs@MIT.EDU
Subject: cache file bug


Hello,

   There is a small problem where by kinit will store the ccache file
through a symlink.  This can be used to force a user's tickets to be
stored on an NFS mounted (or exported) partition.  This is the same
bug that was reported in elm recently.

   I think that adding O_EXCL to the FCC_OPEN_AND_ERASE option of
krb5_fcc_open_file() (fcc_maybe.c) will take care of the problem.
The corresponding change will be needed in krb5_scc_open_file().

Thanks,
Andrew Gross