From 03785cd9b18791828b584941eb81cc7754e72ba5 Mon Sep 17 00:00:00 2001 From: matz Date: Mon, 27 Aug 2007 10:16:25 +0000 Subject: * ext/etc/etc.c (etc_getlogin): update documentation to note security issue. [ruby-Bugs-11821] git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@13285 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- ext/etc/etc.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'ext/etc') diff --git a/ext/etc/etc.c b/ext/etc/etc.c index 486963378b..ecb9e16411 100644 --- a/ext/etc/etc.c +++ b/ext/etc/etc.c @@ -35,6 +35,8 @@ char *getenv(); char *getlogin(); /* Returns the short user name of the currently logged in user. + * Unfortunately, it is often rather easy to fool getlogin(). + * Avoid getlogin() for security-related purposes. * * e.g. * Etc.getlogin -> 'guest' -- cgit v1.2.3