From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: loop in backup-copy-buffer Date: Fri, 24 Aug 2007 13:42:08 -0400 Message-ID: References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1187989389 32602 80.91.229.12 (24 Aug 2007 21:03:09 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 24 Aug 2007 21:03:09 +0000 (UTC) Cc: rgm@gnu.org, emacs-devel@gnu.org, rudalics@gmx.at To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Aug 24 23:03:05 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1IOgIO-0006D3-Dp for ged-emacs-devel@m.gmane.org; Fri, 24 Aug 2007 23:02:20 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IOgIN-0002gP-Th for ged-emacs-devel@m.gmane.org; Fri, 24 Aug 2007 17:02:19 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1IOgIA-0002Q6-8F for emacs-devel@gnu.org; Fri, 24 Aug 2007 17:02:07 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1IOgI8-0002N2-09 for emacs-devel@gnu.org; Fri, 24 Aug 2007 17:02:04 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IOgI7-0002Mi-Sn for emacs-devel@gnu.org; Fri, 24 Aug 2007 17:02:03 -0400 Original-Received: from tomts36.bellnexxia.net ([209.226.175.93] helo=tomts36-srv.bellnexxia.net) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IOdAg-00028C-On; Fri, 24 Aug 2007 13:42:11 -0400 Original-Received: from pastel.home ([70.55.80.33]) by tomts36-srv.bellnexxia.net (InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP id <20070824174209.LSCQ7033.tomts36-srv.bellnexxia.net@pastel.home>; Fri, 24 Aug 2007 13:42:09 -0400 Original-Received: by pastel.home (Postfix, from userid 20848) id B46DB816F; Fri, 24 Aug 2007 13:42:08 -0400 (EDT) In-Reply-To: (Richard Stallman's message of "Fri\, 24 Aug 2007 12\:10\:09 -0400") User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.1.50 (gnu/linux) X-Detected-Kernel: Solaris 8 (1) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:77105 Archived-At: > The problem with make-temp-name is not just a race-condition but that > the race-condition introduces a security hole. I don't think the same > holds for backup files since they must have predicate names. > You might be right -- I am not sure -- but what are predicate names? They're typos. I meant "predictable names". The fact that the names have to be predictable means that the looping trick is not a solution and that a different solution needs to be used, typically by storing those files in directories that are not world-writable (which is indeed the case for backup files and if not, they do not present any additional danger compared to the original file since they're in the same directory anyway). Stefan