At 02:48 PM 7/10/2003 -0500, you wrote:

>Method 1 looks good to me, provided that the value of $$ can't be
>guessed by a program looking to subvert you. If something comes along
>right before the script is run and makes the directory beforehand, you
>may not be able to set permissions on it. It may be wise to grab a few
>characters from /dev/random (still not perfect) or something.

The first method handles this situation already:

mkdir -m 700 /tmp/$$ || exit 1

If the directory exists then mkdir fails and the scripts exits.

This might have gotten wrapped or something in the email.


---
Dustin Puryear <[EMAIL PROTECTED]>
Puryear Information Technology, LLC <http://www.puryear-it.com>
Providing expertise in the management, integration, and
security of Windows and UNIX systems, networks, and applications.


Reply via email to