Re: Bug#77257: FWD: Joe's Own Editor File Link Vulnerability

[Alexander Viro]

On Sun, 19 Nov 2000, Joey Hess wrote:

> Herbert Xu wrote:
> > On Sat, Nov 18, 2000 at 11:26:13AM -0500, Jacob Kuntz wrote:
> > > 
> > > what's wrong with the current practice of putting deadjoe in the current
> > > directory?
> > 
> > cwd == /tmp
> 
> Belive it or not, it is actually possible to write files to /tmp
> securely. It's pretty silly to contemplating changing the bahavior of
> joe when it can just be fixed.

a) take a look at /etc/init.d/bootmisc.sh. Around "Cleaning: /tmp", that is.
b) several editing sessions in parallel.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]