Bug#496360: The possibility of attack with the help of symlinks in some Debian packages

[Julien Cristau <jcristau@debian.org>]

On Fri, Oct 10, 2008 at 17:39:09 +0200, Tobias Klauser wrote:

> I still see a problem with the liquidsoap logfile being written to /tmp
> [1].  The filename there is only depended on the PID of the liquidsoap
> process.  Unfortunately I lack OCaml hacking skills so I didn't patch
> this one.
> 
> [1] set("log.file.path","/tmp/lig.<pid>.log")
> 
set("log.file.path", Filename.temp_file "liguidsoap" ".log")

would probably work (untested, though).

Cheers,
Julien