[Pkg-mc-devel] Bug#504151: leaves empty temporary directories behind on exit: /tmp/mc-$USER/
Michelle Konzack
linux4michelle at tamay-dogan.net
Wed Nov 5 21:52:09 UTC 2008
Hello Paul and Winnie,
Am 2008-11-01 16:48:51, schrieb Paul Wise:
> Package: mc
> Version: 2:4.6.2~git20080311-4
> Severity: normal
>
> mc doesn't remove its temporary directory on exit, it
> leaves /tmp/mc-$USER/ behind, which is annoying for people like me who
> detest cruft and aim to destroy it.
There is additionaly a security problem since if I create
mkdir -p /tmp/mc-paul
chown michelle: /tmp/mc-paul
chmod 700 /tmp/mc-paul
and now paul try to use mc...
For this reason I have create a tool called tdtmpdir which create at
login a ${TMPDIR} of /tmp/${USER}.XXXXXX which can not easyly DoS'ed.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mc-devel/attachments/20081105/32942a9f/attachment.pgp
More information about the Pkg-mc-devel
mailing list