severity 496401 wishlist
retitle 496401 please make debug code use safe tempfiles
thanks

Hi,

This is not a real issue. The files in question are only created when $debug 
is set to one. Furthermore this $debug variable is hardcoded in the script 
(not the general Postfix debugging functionality), so users would have to 
edit a script under /usr/lib to enable it. That is clearly a non-supported 
environment.

I'm leaving this as wishlist. It would be great if safe tempfiles could be 
used nonetheless. People are eager to copy code and such insecure examples 
should by preference not be present.


cheers,
Thijs

Attachment: pgpdJRhgRoaRp.pgp
Description: PGP signature

Reply via email to