This commit addresses a potential security issue where an attacker
could hijack the ScriptBuilder payload by predicting the temporary
directory name.
You can merge this Pull Request by running:

  git pull https://github.com/andrewgaul/jclouds mktemp

Or you can view, comment on it, or merge it online at:

  https://github.com/jclouds/jclouds/pull/420

-- Commit Summary --

  * JCLOUDS-612: Securely create temporary directories

-- File Changes --

    M compute/src/test/resources/initscript_with_jetty.sh (8)
    M 
scriptbuilder/src/main/java/org/jclouds/scriptbuilder/domain/Statements.java (9)
    M 
scriptbuilder/src/test/java/org/jclouds/scriptbuilder/domain/StatementsTest.java
 (8)
    M 
scriptbuilder/src/test/java/org/jclouds/scriptbuilder/statements/ruby/InstallRubyGemsTest.java
 (6)
    M scriptbuilder/src/test/resources/test_install_rubygems.sh (8)
    M scriptbuilder/src/test/resources/test_install_rubygems_scriptbuilder.sh 
(8)

-- Patch Links --

https://github.com/jclouds/jclouds/pull/420.patch
https://github.com/jclouds/jclouds/pull/420.diff

---
Reply to this email directly or view it on GitHub:
https://github.com/jclouds/jclouds/pull/420

Reply via email to