[FFmpeg-user] audio and video sync problem

Eugene Gekhter egekhter at pixcel.com
Mon Jul 7 16:34:02 CEST 2014


Makes sense, thanks for the explanation.

Sent from my iPhone

> On Jul 7, 2014, at 5:03 AM, Tom Evans <tevans.uk at googlemail.com> wrote:
> 
>> On Fri, Jul 4, 2014 at 1:32 PM, Eugene Gekhter <egekhter at pixcel.com> wrote:
>> Carl,
>> 
>> Can you explain why sudo ffmpeg is a bad idea?
>> 
> 
> Giving a process more privileges than are necessary for that process
> to do its function leads you to be more exposed if any security holes
> can be found in that process, since the attacker self-evidently has
> more privileges available.
> 
> ffmpeg doesn't require enhanced privileges, just to be able to read
> its inputs and write to its outputs. Controlling access to
> input/output files can be done by changing file owner or group or file
> permissions, so using "sudo" solely in order to make an unreadable
> input file readable is a lazy and insecure practise that inevitably
> exposes you to more risks as outlined in the first paragraph.
> 
> Cheers
> 
> Tom
> _______________________________________________
> ffmpeg-user mailing list
> ffmpeg-user at ffmpeg.org
> http://ffmpeg.org/mailman/listinfo/ffmpeg-user


More information about the ffmpeg-user mailing list