[FFmpeg-user] audio and video sync problem
Eugene Gekhter
egekhter at pixcel.com
Mon Jul 7 16:34:02 CEST 2014
Makes sense, thanks for the explanation.
Sent from my iPhone
> On Jul 7, 2014, at 5:03 AM, Tom Evans <tevans.uk at googlemail.com> wrote:
>
>> On Fri, Jul 4, 2014 at 1:32 PM, Eugene Gekhter <egekhter at pixcel.com> wrote:
>> Carl,
>>
>> Can you explain why sudo ffmpeg is a bad idea?
>>
>
> Giving a process more privileges than are necessary for that process
> to do its function leads you to be more exposed if any security holes
> can be found in that process, since the attacker self-evidently has
> more privileges available.
>
> ffmpeg doesn't require enhanced privileges, just to be able to read
> its inputs and write to its outputs. Controlling access to
> input/output files can be done by changing file owner or group or file
> permissions, so using "sudo" solely in order to make an unreadable
> input file readable is a lazy and insecure practise that inevitably
> exposes you to more risks as outlined in the first paragraph.
>
> Cheers
>
> Tom
> _______________________________________________
> ffmpeg-user mailing list
> ffmpeg-user at ffmpeg.org
> http://ffmpeg.org/mailman/listinfo/ffmpeg-user
More information about the ffmpeg-user
mailing list