Re: Bug#77257: FWD: Joe's Own Editor File Link Vulnerability
On Sun, 19 Nov 2000, Joey Hess wrote:
> Herbert Xu wrote:
> > On Sat, Nov 18, 2000 at 11:26:13AM -0500, Jacob Kuntz wrote:
> > >
> > > what's wrong with the current practice of putting deadjoe in the current
> > > directory?
> >
> > cwd == /tmp
>
> Belive it or not, it is actually possible to write files to /tmp
> securely. It's pretty silly to contemplating changing the bahavior of
> joe when it can just be fixed.
a) take a look at /etc/init.d/bootmisc.sh. Around "Cleaning: /tmp", that is.
b) several editing sessions in parallel.
Reply to: