Re: xbiff security hole?

[Eric Haszlakiewicz <erh%nimenees.com@localhost>]

On Mon, Jul 21, 2008 at 08:29:49AM -0700, Paul Goyette wrote:
> Running xfree, not modular-X.
> 
> I just noticed that "xbiff -file /var/mail/<otheruser>" has no problem 
> watching for the other user's mailbox to be updated!
> 
> Should I really be able to do this?  :)

xbiff only looks at the file size, so yes, you should be able to do this.

eric