~/.localtime ?

Andreas Jaeger aj@suse.com
Thu Mar 29 13:57:00 GMT 2012


On Thursday, March 01, 2012 14:15:44 Roland McGrath wrote:
> Running programs are not going to be reliably affected unless you
> provoke them to call tzset or equivalent, anyway.  Having things
> stat'ing a file implicitly all the time just to see if it changed is
> not viable because of the performance hit and unwanted exposure to
> filesystem flakiness.  So I don't think you can reasonably get what
> you're after this way.  Having things refer to a new file implicitly
> has all sorts of other complications wrt security concerns and so on.

Roland,

To display the local time, functions call localtime - and that one invokes 
already tzset.

AFAIU changing /etc/localtime changes already today the time of the desktop 
clocks running on a system, so my proposal would indeed add a second 
location - and we should stat ~/.localtime first and only stat 
/etc/localtime if ~/.localtime does not exist.

I talked with our security guys - they came up with this proposal ;) - and 
I don't see a security concern here for displaying the users localtime.

Andreas
-- 
 Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi
  SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany
   GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg)
    GPG fingerprint = 93A3 365E CE47 B889 DF7F  FED1 389A 563C C272 A126



More information about the Libc-alpha mailing list