[18214] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Is /tmp still appropriate?

daemon@ATHENA.MIT.EDU (Hanspeter Schmid)
Wed Dec 20 02:58:42 2000

Message-Id:  <200012190505.eBJ55vY01264@humphrey.ethz.ch>
Date:         Tue, 19 Dec 2000 06:05:57 +0100
Reply-To: Hanspeter Schmid <hanspi@COMPUTER.ORG>
From: Hanspeter Schmid <hanspi@COMPUTER.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To:  <Pine.LNX.4.30.0012151546070.17025-100000@mail.tarp3.com>
              (message from 0d0 on Fri, 15 Dec 2000 16:08:59 -0800)

>>>>> 0d0  <odo@mail.tarp3.com> (" 0d0>" ) wrote:

  >> I'm sure many people have been "guilty" of writing a quick and
  >> nasty shell script that ends in something like: >/tmp/out.$$

  0d0> but why not: >./out.$$ or $MYTMP/out.$$

  0d0> why not add a few lines in the ./configure scripts that will
  0d0> allow for the creation of a $HOME/tmp (if not found) with
  0d0> proper attributes set when the software is installed?

This may come out bad on systems where users' disk quota are limited.
The tmp directory should not be subject to any quota.  So if a program
does what you're suggesting, a normal user could not install it
properly.

Kind regards,
--
Hanspeter Schmid
 Private:          hanspi@computer.org      www.schmid-werren.ch/hanspeter/
  Office:            hps@bernafon.ch     		  www.bernafon.ch/
    IEEE:          h.p.schmid@ieee.org   	 www.ieee-cas.org/~asptc/

home help back first fref pref prev next nref lref last post