Berkeley DB

Security

The following are security issues that should be considered when writing Berkeley DB applications:

Database environment permissions

The directory used as the Berkeley DB database environment should have its permissions set to ensure that files in the environment are not accessible to users without appropriate permissions. Applications that add to the user’s permissions (for example, UNIX setuid or setgid applications) must be carefully checked to not permit illegal use of those permissions such as general file access in the environment directory.

Environment variables

Setting the DB_USE_ENVIRON and DB_USE_ENVIRON_ROOT flags, and allowing the use of environment variables during file naming can be dangerous. Setting those flags in Berkeley ...