Subject | Re: [firebird-support] Firebird 2.5 connection issue |
---|---|
Author | Mark Rotteveel |
Post date | 2014-07-18T13:34Z |
On 18-7-2014 14:34, Tim Ward tdw@... [firebird-support] wrote:
system. For example if you don't have access rights to a file and you
also have no rights to list files in the parent folder, then you are not
allowed to know if the file exists or not, therefor the error given is
not access denied, but file not found. An Access denied error would leak
knowledge about the existence of a file. However if you would have
rights to list files in the folder, but no read and write rights on the
file, you might get an Access denied instead.
However, Firebird simply communicates the error given by the Operating
System.
Mark
--
Mark Rotteveel
> On 18/07/2014 13:31, Mark Rotteveel mark@...That is usually an intentional design of the security of the operating
> [firebird-support] wrote:
>>
>>
>> That would give an entirely different error. The database file either
>> doesn't exist, or the user account running the Firebird service does not
>> have access to this folder.
>>
> Yes, I've noticed that on Linux - you get the "file not found" message
> when actually what it should say is "access denied".
system. For example if you don't have access rights to a file and you
also have no rights to list files in the parent folder, then you are not
allowed to know if the file exists or not, therefor the error given is
not access denied, but file not found. An Access denied error would leak
knowledge about the existence of a file. However if you would have
rights to list files in the folder, but no read and write rights on the
file, you might get an Access denied instead.
However, Firebird simply communicates the error given by the Operating
System.
Mark
--
Mark Rotteveel