Re: FALSE ALARM: Re: Another buggy root cron job

[ Available lists | Index of freebsd-security | Month of Dec 1996 | Week of 27 Dec 1996 | Raw email | View thread | Wrap long lines | Reply | Tag ]
From
Wolfram Schneider <wosch@cs.tu-berlin.de>
Date
27 Dec 1996 17:43:27
Subject
Re: FALSE ALARM: Re: Another buggy root cron job
Message-ID
199612280109.CAA01043@campa.panke.de

In reply to
References to

[ Hide this part ]
Bruce Evans writes:
>There's a similar potential hole in mkdep. This hole is a bit larger
>than the one for the race in mktemp(). No one runs `make depend' or
>compiles things as root on public machines, right? ;-)

TMP=_mkdep$$ should fix the problem - it put the temp files into the
current working directory. The source tree or object tree
should not be world writable ;-)

Wolfram

Elapsed time: 0.067 seconds