Can I assume that the Windows profile directory is not writable by any user other than the user my program is running under and the system administrator (who can access anything)?
More specifically:
The SlipRock library creates a directory ~/.sliprock
. This directory contains temporary files, which in turn contain (among other things) a secret access key. Therefore, if other users are able to read these files, the result is a security vulnerability.
The directory is created with strict permissions that deny access to untrusted code, but these are moot if another user could rename the directory. Can I be confident that a user’s home directory (as returned by GetUserProfileDirectory
) is a secure directory?