From: Georg Brandl <georg@python.org>
Date: Sun, 17 Jul 2005 21:10:07 +0000 (+0000)
Subject: bug [ 872769 ] os.access() documentation should stress race conditions
X-Git-Tag: v2.4.2c1~131
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9e9452fda01c281dda609895e370cc97b4cdb046;p=thirdparty%2FPython%2Fcpython.git

bug [ 872769 ] os.access() documentation should stress race conditions
---

diff --git a/Doc/lib/libos.tex b/Doc/lib/libos.tex
index b5703637882d..46764b2bb6da 100644
--- a/Doc/lib/libos.tex
+++ b/Doc/lib/libos.tex
@@ -667,6 +667,11 @@ test permissions.  Return \constant{True} if access is allowed,
 \constant{False} if not.
 See the \UNIX{} man page \manpage{access}{2} for more information.
 Availability: Macintosh, \UNIX, Windows.
+
+\note{Using \function{access()} to check if a user is authorized to e.g.
+open a file before actually doing so using \function{open()} creates a 
+security hole, because the user might exploit the short time interval 
+between checking and opening the file to manipulate it.}
 \end{funcdesc}
 
 \begin{datadesc}{F_OK}