Skip to Content.
Sympa Menu

sm-sorcery-bugs - [SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use

sm-sorcery-bugs AT lists.ibiblio.org

Subject: Bugs for Sorcery are reported here

List archive

Chronological Thread  
  • From: bugzilla-daemon AT metalab.unc.edu
  • To: sm-sorcery-bugs AT lists.ibiblio.org
  • Subject: [SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use
  • Date: Sun, 17 Oct 2004 18:51:13 -0400

http://bugs.sourcemage.org/show_bug.cgi?id=7536

Summary: need a generalized mk_tmp_dir function for all utilities
to use
Product: Sorcery
Version: 1.12.x
Platform: Other
OS/Version: other
Status: NEW
Severity: major
Priority: P1
Component: subroutines
AssignedTo: sm-sorcery-bugs AT lists.ibiblio.org
ReportedBy: acedit AT armory.com


Its come to our attention that a lot of files live in /tmp and sorcery doesnt
check before writting stuff to them in some cases, with clever use of symlinks
this can cause sorcery to destroy valuable data and opens the door for
security
problems. The main way to solve all these problems is to force all temporary
file access to be done in a protected directory. cast already has this
infrastructure in place. I think the easiest way to go about this is to
have all utilities carry a global TMP_DIR variable, and all functions that
need to write to a file must create it under $TMP_DIR (which presumably is
known to be protected).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



  • [SM-Sorcery-Bugs] [Bug 7536] New: need a generalized mk_tmp_dir function for all utilities to use, bugzilla-daemon, 10/17/2004

Archive powered by MHonArc 2.6.24.

Top of Page