first bunch of patches with mkstemp()

Russ Allbery rra at stanford.edu
Wed Aug 8 17:05:58 UTC 2001


greg andruk <gja at meowing.net> writes:
> On Tue, Aug 07, 2001 at 03:47:28PM -0700, Russ Allbery wrote:

>> If so, the easiest would probably be to just write a function that does
>> only that, and then document that it shouldn't ever be used to create
>> temporary files in world-writeable directories (and maybe through some
>> checks into the function so that it refuses to generate file names in
>> world-writeable directories).

> Yep, that's really all that's needed.  Would the perm checks on incoming
> and run be more something that innd and rnews should be worrying about
> when they start?

Mostly depends on how paranoid about coding mistakes we want to be, I
think.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>


More information about the inn-workers mailing list