On Wed, Jul 23, 2003 at 08:21:09AM +0200, Christoph Hellwig wrote: > On Wed, Jul 23, 2003 at 02:09:28PM +1000, Martin Pool wrote: > > There is already a PAM modules, libpam-tmpdir which automatically sets > > this up on login by creating a per-user directory under /tmp and > > pointing TMPDIR at it. Despite the scary low version number of 0.04 > > it seems to work reliably and presumably any bugs could be fixed. > > Nice idea, wrong implementation. Let login fork the login shell with > CLONE_NEWNS and do a VFS-binding from ~/tmp to /tmp. Except for OS types or versions that don't support that, or people who actually want /tmp when they explicitly request it, even if TMPDIR=~/tmp is fine most of the time. I can't think of a better way to get admins to simply turn it off completely than to make it completely override /tmp and have no good way around that. -- Joel Baker <fenton@debian.org>
Attachment:
pgpNFyaC3WWts.pgp
Description: PGP signature