[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#77257: FWD: Joe's Own Editor File Link Vulnerability



On Sat, Nov 18, 2000 at 09:50:49AM +1100, Herbert Xu wrote:
> Colin Phipps <cph@netcraft.com> wrote:
> >
> > A fix, but it breaks the intended behaviour ("a" for append IIRC). Putting 
> > DEADJOE in $HOME might be a nicer solution?
> 
> No please, temporary files have no place in a user's home directory, because
> unlike /tmp it won't be deleted until the user intervenes in the event of a
> crash.
> 
> Do the right thing and use tmpfile(3).

DEADJOE isn't a temporary file.  It's supposed to be preserved after a
crash - that's the whole use of it.  It shows what files were being
edited when joe was killed.

Dan

/--------------------------------\  /--------------------------------\
|       Daniel Jacobowitz        |__|        SCS Class of 2002       |
|   Debian GNU/Linux Developer    __    Carnegie Mellon University   |
|         dan@debian.org         |  |       dmj+@andrew.cmu.edu      |
\--------------------------------/  \--------------------------------/



Reply to: