[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shell programming



It is best not to use /tmp at all , just use a private
temp directory that only root can read.

> You'll want to keep in mind that scripts like this can be a security
> hazzard.  You'll likely want to have a directory that only the user that
> is running this script can write to, to avoid symlinks that overwrite
> or create important files. (such as /etc/nologin or ~/.rhosts)
> 
> i.e. if "/tmp/$$.out" is a symlink that points to /etc/nologin, and this
> script is run as root, /etc/nologin will be created, possibly resulting
> in a denial of service.
> 
> - Chris
> 
> -- 
> -------------------------------------------
> "Chase the dream, not the competition."
>      - motto of the Nemesis Air Racing Team
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 


Reply to: