52
12
On my Linux filesystem, a symlink points to 127.0.1.1:+xxxxx.
Why the plus sign? Could there also be a minus? Why not just 127.0.1.1:xxxxx?
myMethod
Posted 2018-10-03T19:01:21.227
Reputation: 621
In a symlink pointing to '127.0.1.1:+xxxxx', what is the plus character for?
Answers
93
Symbolic links which don't point to a file have no generic meaning at all. In this case it might be the process ID, or a port with some special protocol spoken over it, or another identifier. It all depends on what program made it.
Software which creates these links simply takes advantage of the facts that 1) a symlink's target may be non-existent or even total nonsense; 2) creating a symlink is a single-syscall completely atomic operation (as is reading its target), unlike creating a regular file which takes at least 3 separate system calls.
Thus symlink creation can be abused as a way of locking (ensuring single instance of a program) even when other mechanisms may be unreliable. The program doesn't need the symlink to actually resolve to a real file: it only cares about whether creating the link succeeds, or whether it fails due to it already existing.
user1686
Posted 2018-10-03T19:01:21.227
Reputation: 283 655
5"* unlike creating a regular file which takes at least 3 separate system calls.*" -- Could you clarify? Do you mean fopen, fwrite, and fclose? – Fund Monica's Lawsuit – 2018-10-04T19:21:54.843
11@NicHartley: The system calls are open (or maybe creat in old software), write, and close, not the f* versions that stdio provides. But, yes, you need to do at least open and write to create the file and put something meaningful into it. Now if you want some code to "try to create it, if successful, put some information into it, else, read some information from it", the second process could just try its read before the first process has a chance to write. symlink avoids that; either succeed and create the link, or fail and be sure readlink has the information for you. – Guntram Blohm supports Monica – 2018-10-04T19:50:43.330
"...can be abused as a way..." Is this abuse as in "used in a way it was not intended to be used" or "used in a way it should not be used"? – The Guy with The Hat – 2018-10-26T19:23:05.567
22
As far as I know the "+" means that the number after the IP (the "xxxxx") refers to a "process ID" (not a port which usually uses the notation [IP-address]:[portnumber]).
It is possible that this "notation" (not sure I would call it a "notation" since I don't know of any "official" documentation) refers to something else if used by a specific application - but then again, that's always the possibility not only with symlinks. The only cases I know of (and could find with a search that wasn't too extensive) the "+XXXX" always refered to the process ID.
Albin
Posted 2018-10-03T19:01:21.227
Reputation: 3 983
1I just checked it. In my case it really does. – myMethod – 2018-10-03T19:27:09.923
1Is there documentation of this format somewhere that you could link to? – David Z – 2018-10-03T20:31:47.440
1Not sure, I just remember it from hands on experience. – Albin – 2018-10-03T20:55:53.650
2It sounds like you're talking about a symlink in a special directory, like /proc or /dev. Can you explain what this symlink is used for? – Barmar – 2018-10-04T01:48:05.083
@Barmar I'm refering to the notation in general, I'm not talking about a specific symlink in a specific directory – Albin – 2018-10-04T09:53:04.520
4This is the first time I've seen this notation at all, so I'm surprised to hear you say that it's a general notation. Where have you seen it used to mean a process ID? – Barmar – 2018-10-04T15:24:23.673
@Barmar I have no idea how "general" this notation really is, if it's a distribution specific thing or whatever. When I looked it it up quite a while ago the only resources I found referenced the number after the + to a process ID which was the solution in my case as well. myMethod said in his first comment that it applies in his use case too. – Albin – 2018-10-04T19:40:58.893
I've never seen this notation anywhere before, it sounds like it may be specific to a particular application. Do you remember where yiou saw it before? – Barmar – 2018-10-04T19:42:19.347
@Barmar no, I just remember it took me a while to find the answer. Just look the "IP:+" notation after some trial and error you should find a few examples (most results will point you to the IP:PORT notation, but that wasn't it, that's why I still remember - and because it was a linux based issue which I don't deal with very often) – Albin – 2018-10-04T19:47:44.977
Is this symbolic link under /proc? – Joshua – 2018-10-03T22:15:43.010
4@Joshua: More likely under ~/.mozilla/ or similar. Firefox/Thunderbird, and iirc Steam, use such symlinks for locking. – user1686 – 2018-10-04T04:05:10.047
2Is xxxxx a number, or the characters xxxxx? – Mawg says reinstate Monica – 2018-10-05T09:55:11.273
2Probably unrelated but just for information. In some IRC clients the plus-sign before the port was there to indicate the remote server uses SSL/TLS. – eKKiM – 2018-10-05T14:43:15.833