Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added exception for rotating logfiles

...

FIO45-EX2: Accessing a path multiple times is permitted if the path can not be modified by an attacker. This could occur, for example, if the path refers to a secure directory (for more information, see FIO15-C. Ensure that file operations are performed in a secure directory).

FIO45-EX3: Repeatedly opening and closing a file in append mode (in order to add data) is permitted as an exception to this rule. Many servers will open a log file for appending, write a few log messages, and immediately close the file. The server does not care if this log file changes periodically, and many systems archive old log files and create a new empty log file periodically.

FIO45-EX4: Accessing a path multiple times is permitted if the program is able to verify that every operation indeed operates on the same file.

...