On Wednesday, 10 de August de 2011 16:02:11 David Faure wrote:
> Similar to QTemporaryFile, I'm thinking of creating a QTemporaryDirectory
> class, for these cases where apps need a temp dir (e.g. to extract a zip, or
> write files before zipping them, or for unittests that need many files,
> like those testing directory-copy-operations).
> 
> Of course one could use QTemporaryFile to get a temp filename, let the
> destructor delete it, and then create it as a directory, but AFAIK this is a
> bad idea, it creates a time window for a symlink attack (e.g. the attacker
> could be notified of the file creation+deletion using inotify).
> 
> So, would a merge request for QTemporaryDirectory be a good idea?

I think so.

-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
   Software Architect - Intel Open Source Technology Center
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Qt5-feedback mailing list
[email protected]
http://lists.qt.nokia.com/mailman/listinfo/qt5-feedback

Reply via email to