Just a random thought regarding e.g.: find /tmp -mtime +1 -print | xargs rm -f It seems that the vulnerability window would be a lot smaller with something like: find /tmp -mtime +1 -exec rm -f {} \;