[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: checking for /tmp security holes



Previously Joey Hess wrote:
> It just occurred to me that we could probalby use libtricks or strace to
> find all access to /tmp during a debian install, and then grep out the safe
> ones. Would be an interesting project.

strace -f -e file dpkg -i xxx.deb 2| grep ^open

Only problem is that strace fails when dpkg installs a large package.
I think the problem is that dpkg forks a _lot_ of processes, but I
haven't been able to find out exactly why it fails..

Wichert.

Attachment: pgpe7itoOzqQn.pgp
Description: PGP signature


Reply to: