Re: checking for /tmp security holes

[joostje@debian.org]

> 
> It just occurred to me that we could probalby use libtricks or strace to
> find all access to /tmp during a debian install, and then grep out the safe
> ones. Would be an interesting project.

Yeah, you can. And especially for that purpose I've written that
`trick-chktmp' script. Just use that as your shell (or start it
with `trick-chktmp tcsh' if you prefer tcsh), and you'll get a message
to stderr for every suspicious write to /tmp.

Note that those messages to stderr can easily be sent to syslog, or to
a file of your choise. See the script, in combination with 
trick-logopen (that sends stuff to a file).

BTW, please use libtricks_0.2-2, as that will present you with a lot
less neasty surprises than libtricks_0.2-1. (no, there weren't really
bugs in -1, everything was accoring docs, but then the docs said not
to use chars like ')', or ':' inside double quotes. Not what you'd
expect. That has been removed in -2).

joost (joostje@debian.org)