Re: [Toybox] [PATCH] mktemp fixes

2015-02-10 Thread Rob Landley
On 02/10/2015 06:37 PM, Rich Felker wrote: On Tue, Feb 10, 2015 at 01:47:01AM -0600, Rob Landley wrote: rapidly respond to arbitrary file creation ala inotify, we're toast. So the attack vector would be... saturating the namespace with symlinks? (It'd be really nice if O_NOFOLLOW was more

Re: [Toybox] [PATCH] mktemp fixes

2015-02-10 Thread Rich Felker
On Tue, Feb 10, 2015 at 01:47:01AM -0600, Rob Landley wrote: sort-of speaking of which... i didn't include this before since it wasn't really a bug fix but do you think we should use more randomness? 6 Xes is the minimum you're allowed to pass to the C library, and the desktop mktemp(1)

Re: [Toybox] Regarding test.sh

2015-02-10 Thread Rob Landley
On 02/03/2015 11:14 PM, Yeongdeok Suh wrote: Hello, I usually use 'scripts/test.sh' scrips for testing ARM based boards. But Toybox test script does compile and running at the same time, so it's hard to compile and execute testsuite independently in cross compile environment, On the