Neil Conway wrote: > On Thu, 2004-11-04 at 10:07, Bruce Momjian wrote: > > My method is secure, and I think we do have to handle this in a way that > > addresses the security concerns. > > I think Tom's fix adequately addresses the security concerns. Exactly > what is wrong with writing to the current working directory?
Because it could be run from a directory where others have write permission. > > It is easy to say no one would run > > this under normal use but that isn't really a safe answer for the > > security folks, I think. > > This is a non-sequitor -- I don't think Tom or anyone else has argued > this. I remember hearing that from someone. I thought it was Tom. Bottom line is that the only secure way I have ever heard of for creating temp files is to create a 077 directory in /tmp and write in there. -- Bruce Momjian | http://candle.pha.pa.us [EMAIL PROTECTED] | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073 ---------------------------(end of broadcast)--------------------------- TIP 4: Don't 'kill -9' the postmaster
