On Wed, Apr 16, 2014 at 5:23 PM, milki <[email protected]> wrote:
> On 13:10 Wed 16 Apr     , Jason A. Donenfeld wrote:
>> Setuiding mdconfig will probably result in some kind of local priv
>> escalation bug. I don't want to do that.
>
> Right, so I recommend removing the freebsd.sh from platform to prevent
> any temp file leaks with the false assumption that the temp dir is
> secure.

Done.
http://git.zx2c4.com/password-store/commit/?id=eb87d5dee176f8d7057d05d24302040ab1b56768
_______________________________________________
Password-Store mailing list
[email protected]
http://lists.zx2c4.com/mailman/listinfo/password-store

Reply via email to