[Pkg-mc-devel] Bug#504151: leaves empty temporary directories behind on exit: /tmp/mc-$USER/

Michelle Konzack linux4michelle at tamay-dogan.net
Wed Nov 5 21:52:09 UTC 2008


Hello Paul and Winnie,

Am 2008-11-01 16:48:51, schrieb Paul Wise:
> Package: mc
> Version: 2:4.6.2~git20080311-4
> Severity: normal
> 
> mc doesn't remove its temporary directory on exit, it
> leaves /tmp/mc-$USER/ behind, which is annoying for people like me who
> detest cruft and aim to destroy it.

There is additionaly a security problem since if I create 

    mkdir -p /tmp/mc-paul
    chown michelle: /tmp/mc-paul
    chmod 700 /tmp/mc-paul

and now paul try to use mc...

For this reason I have create a tool called  tdtmpdir  which  create  at
login a ${TMPDIR} of /tmp/${USER}.XXXXXX which can not easyly DoS'ed.

Thanks, Greetings and nice Day/Evening
    Michelle Konzack
    Systemadministrator
    24V Electronic Engineer
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
+49/177/9351947    50, rue de Soultz         MSN LinuxMichi
+33/6/61925193     67100 Strasbourg/France   IRC #Debian (irc.icq.com)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mc-devel/attachments/20081105/32942a9f/attachment.pgp 


More information about the Pkg-mc-devel mailing list