Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2019-01-17 Thread Daniel Kahn Gillmor
On Wed 2019-01-16 18:40:06 -0800, Sunil Mohan Adapa wrote: > tags 656750 + patch Thanks for this, Sunil! I'll try to review it soon. Feel free to ping if i haven't moved on it in a few days. --dkg signature.asc Description: PGP signature

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2019-01-16 Thread Sunil Mohan Adapa
tags 656750 + patch thanks On Mon, 23 Jan 2012 12:55:58 -0500 Daniel Kahn Gillmor wrote: > On 01/23/2012 12:19 PM, Jameson Graef Rollins wrote: > > It occurs to me that we already have/use a tmp directory in the > > monkeysphere authentication directory > > (/var/lib/monkeysphere/authentication/t

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2012-01-23 Thread Daniel Kahn Gillmor
On 01/23/2012 12:19 PM, Jameson Graef Rollins wrote: > It occurs to me that we already have/use a tmp directory in the > monkeysphere authentication directory > (/var/lib/monkeysphere/authentication/tmp). Maybe we should just > explicitly set TMPDIR for the monkeysphere user to be that? Doing thi

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2012-01-23 Thread Jameson Graef Rollins
On Mon, 23 Jan 2012 09:47:06 -0500, Daniel Kahn Gillmor wrote: > I'm pretty sure i disagree with this; we actually may want to pass > environment variables across the switch-user call, and (for example) the > admin might want to set TMPDIR to instruct monkeysphere-authentication > where to place

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2012-01-23 Thread Jonas Smedegaard
On 12-01-23 at 09:47am, Daniel Kahn Gillmor wrote: > On 01/23/2012 06:54 AM, Jonas Smedegaard wrote: > > Yes, sounds most sensible to me that you _do_ reset all variables > > (i.e. spawn a login-like shell when switching user) and then pass > > explicitly what you want transfered. It is not like

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2012-01-23 Thread Daniel Kahn Gillmor
On 01/23/2012 06:54 AM, Jonas Smedegaard wrote: > Yes, sounds most sensible to me that you _do_ reset all variables (i.e. > spawn a login-like shell when switching user) and then pass explicitly > what you want transfered. It is not like you need to support executing > random user commands, onl

Bug#656750: [monkeysphere] Bug#656750: monkeysphere: wrongly preserves TMPDIR across accounts

2012-01-23 Thread Jonas Smedegaard
retitle 656750 monkeysphere: wrongly preserves TMPDIR across accounts thanks On 12-01-22 at 11:54pm, Daniel Kahn Gillmor wrote: > On 01/22/2012 11:33 PM, Jameson Graef Rollins wrote: > > However, it seems to me that what you've shown is that monkeysphere > > (gpg really) actually *is* respecting