From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Tassilo Horn Newsgroups: gmane.emacs.devel Subject: Re: [Emacs-diffs] /srv/bzr/emacs/trunk r111747: * doc-view.el (doc-view-odf->pdf-converter-soffice): Use separate Date: Wed, 13 Feb 2013 10:14:27 +0100 Message-ID: <87r4kk379o.fsf@thinkpad.tsdh.de> References: <8738x04rp4.fsf@thinkpad.tsdh.de> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1360746880 2665 80.91.229.3 (13 Feb 2013 09:14:40 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 13 Feb 2013 09:14:40 +0000 (UTC) Cc: Stefan Monnier , emacs-devel@gnu.org To: Andreas Schwab Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Feb 13 10:15:01 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1U5YQb-0007JS-7P for ged-emacs-devel@m.gmane.org; Wed, 13 Feb 2013 10:14:57 +0100 Original-Received: from localhost ([::1]:58384 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1U5YQH-00037F-9l for ged-emacs-devel@m.gmane.org; Wed, 13 Feb 2013 04:14:37 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:50936) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1U5YQB-00036K-Pr for emacs-devel@gnu.org; Wed, 13 Feb 2013 04:14:35 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1U5YQA-0007Pw-2D for emacs-devel@gnu.org; Wed, 13 Feb 2013 04:14:31 -0500 Original-Received: from deliver.uni-koblenz.de ([141.26.64.15]:52137) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1U5YQ9-0007Ps-SH for emacs-devel@gnu.org; Wed, 13 Feb 2013 04:14:29 -0500 Original-Received: from localhost (localhost [127.0.0.1]) by deliver.uni-koblenz.de (Postfix) with ESMTP id 825441A845C; Wed, 13 Feb 2013 10:14:29 +0100 (CET) X-Virus-Scanned: amavisd-new at uni-koblenz.de Original-Received: from deliver.uni-koblenz.de ([127.0.0.1]) by localhost (deliver.uni-koblenz.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mQqW_pHkIlgF; Wed, 13 Feb 2013 10:14:29 +0100 (CET) X-CHKRCPT: Envelopesender noch tsdh@gnu.org Original-Received: from thinkpad.tsdh.de (tsdh.uni-koblenz.de [141.26.67.142]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by deliver.uni-koblenz.de (Postfix) with ESMTPSA id 3A2D91A844A; Wed, 13 Feb 2013 10:14:29 +0100 (CET) Mail-Followup-To: Andreas Schwab , Stefan Monnier , emacs-devel@gnu.org In-Reply-To: (Andreas Schwab's message of "Wed, 13 Feb 2013 09:31:00 +0100") User-Agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/24.3.50 (gnu/linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 141.26.64.15 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:157001 Archived-At: Andreas Schwab writes: >> Is there still a problem with this? LibreOffice doesn't write any >> sensitive data into that temporary directory, and as you can see, >> it's immediately deleted after the ODF->PDF conversion. > > It's not about sensive data, but about unsecure access to a > world-writable directory. Yes, I understand. But the new version doesn't exhibit this problem because (make-temp-file dir t) is guaranteed to create a new directory (owned by the user with #o700 permissions), or do I miss something? Bye, Tassilo