[Pkg-lustre-maintainers] Bug#496371: Bug#496371: The possibility of attack with the help of symlinks in some Debian packages

[Stephen Gran]

This one time, at band camp, Patrick Winnertz said:
> Thanks Stephen,
> 
> > tmpfile=$(mktemp /tmp/iozone.XXXXXXXXXX)
> I know that this way it is possible. But as the user should find the log 
> afterwards I would prefer to use /tmp/iozone.log or something else, nothing 
> random. 
> But as I wrote in my previous email I don't have a idea how to fix this without 
> using mktemp.

You can echo what file to look at.
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran at debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-lustre-maintainers/attachments/20080827/9167fc02/attachment.pgp