first bunch of patches with mkstemp()
Russ Allbery
rra at stanford.edu
Wed Aug 8 17:05:58 UTC 2001
greg andruk <gja at meowing.net> writes:
> On Tue, Aug 07, 2001 at 03:47:28PM -0700, Russ Allbery wrote:
>> If so, the easiest would probably be to just write a function that does
>> only that, and then document that it shouldn't ever be used to create
>> temporary files in world-writeable directories (and maybe through some
>> checks into the function so that it refuses to generate file names in
>> world-writeable directories).
> Yep, that's really all that's needed. Would the perm checks on incoming
> and run be more something that innd and rnews should be worrying about
> when they start?
Mostly depends on how paranoid about coding mistakes we want to be, I
think.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the inn-workers
mailing list