From mboxrd@z Thu Jan 1 00:00:00 1970 Path: quimby.gnus.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: many packages write to `temporary-file-directory' insecurely Date: Tue, 5 Mar 2002 14:58:30 -0700 (MST) Message-ID: <200203052158.g25LwUk01294@wijiji.santafe.edu> References: <1014945351.23435.102.camel@space-ghost> <1015103550.7365.17.camel@space-ghost> <200203031718.g23HIKt23295@rum.cs.yale.edu> <200203032036.MAA29961@radish.petrofsky.org> <200203042341.g24NfAA00521@aztec.santafe.edu> <200203050226.SAA32321@radish.petrofsky.org> Reply-To: rms@gnu.org NNTP-Posting-Host: quimby2.netfonds.no X-Trace: quimby2.netfonds.no 1015368620 14743 195.204.10.66 (5 Mar 2002 22:50:20 GMT) X-Complaints-To: usenet@quimby2.netfonds.no NNTP-Posting-Date: 5 Mar 2002 22:50:20 GMT Cc: monnier+gnu/emacs@RUM.cs.yale.edu, Pavel@Janik.cz, walters@verbum.org, emacs-devel@gnu.org Original-Received: from fencepost.gnu.org ([199.232.76.164]) by quimby2.netfonds.no with esmtp (Exim 3.12 #1 (Debian)) id 16iNlD-0003ph-00 for ; Tue, 05 Mar 2002 23:50:19 +0100 Original-Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org) by fencepost.gnu.org with esmtp (Exim 3.33 #1 (Debian)) id 16iMyw-0005qx-00; Tue, 05 Mar 2002 17:00:26 -0500 Original-Received: from pele.santafe.edu ([192.12.12.119]) by fencepost.gnu.org with esmtp (Exim 3.33 #1 (Debian)) id 16iMx6-0005bS-00; Tue, 05 Mar 2002 16:58:32 -0500 Original-Received: from wijiji.santafe.edu (wijiji [192.12.12.5]) by pele.santafe.edu (8.11.6+Sun/8.9.3) with ESMTP id g25Lwdu28055; Tue, 5 Mar 2002 14:58:39 -0700 (MST) Original-Received: (from rms@localhost) by wijiji.santafe.edu (8.11.6+Sun/8.9.3) id g25LwUk01294; Tue, 5 Mar 2002 14:58:30 -0700 (MST) X-Authentication-Warning: wijiji.santafe.edu: rms set sender to rms@wijiji using -f Original-To: al@petrofsky.org In-reply-to: <200203050226.SAA32321@radish.petrofsky.org> (message from Al Petrofsky on Mon, 4 Mar 2002 18:26:40 -0800) Errors-To: emacs-devel-admin@gnu.org X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.0.5 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Emacs development discussions. List-Unsubscribe: , List-Archive: Xref: quimby.gnus.org gmane.emacs.devel:1754 X-Report-Spam: http://spam.gmane.org/gmane.emacs.devel:1754 The catch is that if someone has made /tmp/emacs-game-scores a symbolic link to one of our directories, then we could overwrite the file named snake-scores in that directory. I see there is no way to fix that--the user that owns the directory could always delete it and replace it with a link at just the wrong time. But /tmp is the wrong place for score files anyway. The point of (set-file-modes temp #o444) is to ensure the file is world-readable, in case the user has a paranoid umask. Making the file non-writable is not necessary. For a score file, it's a bug, isn't it? _______________________________________________ Emacs-devel mailing list Emacs-devel@gnu.org http://mail.gnu.org/mailman/listinfo/emacs-devel