[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Uploaded devscripts 2.0.0 (source all) to master

Martin Bialasinski wrote:
> I am also not sure what the problem is. Somone pointed out, that if
> the situation is:
> cd /tmp
> touch abc
> ln -s abc def
> then writing to def would host abc. Ok so far.
> I would program this so:
> rm def
> if not successfull then bail out
> create def
> if not successfull than bail out
> write to def
> Is this unsave? Why?

Race condition.

Please, read up on general /tmp security issues before even thinking about
using files in /tmp. Does anyone have any good urls?

see shy jo

Reply to: