On Sun, Oct 21, 2007 at 08:16:49AM +0000, Steffen Joeris wrote: > Hi > > Today, I had a look at the new upstream version 1.7.1, in order to fix > unstable and testing. Thew new upstream version uses a function called > mktempf () . There you generate the tempfile. However, you do not use > the "mktemp" program. I did not try it so far, but I think that it is > possible to guess the temp file, because you use > _TMPFILE="$TMPDIR/`basename $0`.`date '+%Y%m%d-%H%M%S'`.$$" > > I would suggest using mktemp instead, which creates unique temporary > filenames, which cannot be guessed.
what would be the point ? $TMPDIR is 0700. > > Cheers > Steffen -- ·O· Pierre Habouzit ··O [EMAIL PROTECTED] OOO http://www.madism.org
pgpmYbsB5lWWf.pgp
Description: PGP signature
