Date: Sun, 19 Nov 2000 22:39:47 -0800 From: Kris Kennaway <kris@FreeBSD.ORG> To: Mark Murray <mark@grondar.za> Cc: Kris Kennaway <kris@FreeBSD.ORG>, audit@FreeBSD.ORG Subject: Re: m4 tempfile fix Message-ID: <20001119223947.A71937@citusc17.usc.edu> In-Reply-To: <200011200611.eAK6BdJ17996@gratis.grondar.za>; from mark@grondar.za on Mon, Nov 20, 2000 at 08:11:35AM %2B0200 References: <20001119165711.A3579@citusc17.usc.edu> <200011200611.eAK6BdJ17996@gratis.grondar.za>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Mon, Nov 20, 2000 at 08:11:35AM +0200, Mark Murray wrote: > > m4 was abusing mktemp() to make a unique prefix but then tacking on > > predictable prefixes to make multiple files. I fixed it to create a > > secure directory where it can play with its insecure filenames to its > > heart content. Reviews, anyone? > > Don't like it, particularly if the directory is reasonably long-lived. > > All an attacker needs to do is spin-wait for your dir, then cd into it. mkdtemp() creates directories mode 0700 Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjoYxzMACgkQWry0BWjoQKXtVACgvo5rhCdxaXcrhToSYW3KdgK/ wq8AnilDZmGkvjRHSYMkfRSjo+rXNOua =PXNt -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001119223947.A71937>