sm-sorcery-bugs AT lists.ibiblio.org
Subject: Bugs for Sorcery are reported here
List archive
[SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use
- From: bugzilla-daemon AT metalab.unc.edu
- To: sm-sorcery-bugs AT lists.ibiblio.org
- Subject: [SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use
- Date: Sun, 17 Oct 2004 18:51:13 -0400
http://bugs.sourcemage.org/show_bug.cgi?id=7536
Summary: need a generalized mk_tmp_dir function for all utilities
to use
Product: Sorcery
Version: 1.12.x
Platform: Other
OS/Version: other
Status: NEW
Severity: major
Priority: P1
Component: subroutines
AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
ReportedBy: acedit AT armory.com
Its come to our attention that a lot of files live in /tmp and sorcery doesnt
check before writting stuff to them in some cases, with clever use of symlinks
this can cause sorcery to destroy valuable data and opens the door for
security
problems. The main way to solve all these problems is to force all temporary
file access to be done in a protected directory. cast already has this
infrastructure in place. I think the easiest way to go about this is to
have all utilities carry a global TMP_DIR variable, and all functions that
need to write to a file must create it under $TMP_DIR (which presumably is
known to be protected).
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
- [SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use, bugzilla-daemon, 10/17/2004
Archive powered by MHonArc 2.6.24.