Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jan 2000 14:29:42 +1100
From:      Peter Jeremy <peter.jeremy@alcatel.com.au>
To:        Kris Kennaway <kris@hub.freebsd.org>
Cc:        audit@FreeBSD.ORG
Subject:   Re: libc patch to warn about tempfiles
Message-ID:  <00Jan17.142945est.40327@border.alcanet.com.au>
In-Reply-To: <Pine.BSF.4.21.0001161808160.32821-100000@hub.freebsd.org>; from kris@hub.freebsd.org on Mon, Jan 17, 2000 at 01:04:11PM %2B1100
References:  <Pine.BSF.4.21.0001161808160.32821-100000@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2000-Jan-17 13:04:11 +1100, Kris Kennaway <kris@hub.freebsd.org> wrote:
>Here's a patch to libc which complains when an application tries to use
>mktemp()/mkstemp()/... with fewer than 10 X's (using 6 is common, but
>unfortunately insecure since the PID is either known or easily guessable,
>leaving only 52 different results). This may be useful for tracking down
>insecure ports, as well as things in the base tree which have yet to be
>fixed.

I think that changing the algorithm to use a denser encoding (eg
encoding the PID in base-62 or more, rather than base 10) would be
a better solution.  This way you don't need to change the functions
using mktemp() et al.

Peter


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00Jan17.142945est.40327>