debian/cdesktop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SECURITY fix for dtappintegrate: Use mktemp(1) to generate a template.

Browse Source 
Using a fixed filename in /tmp is just begging for a symlink attack ...
This commit is contained in:
Pascal Stumpf
2013-07-23 00:59:23 +02:00
committed by Jon Trulson
parent 6c42732461
commit f9a70b5165
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cde/programs/dtappintegrate/dtappintegrate.src
View File

@@ -300,7 +300,7 @@ FRONTPANEL_FILES=*.fp
APPMAN_FILES="(*)" APPMAN_FILES="(*)"
ID=$(id) ID=$(id)
LOGFILE=/tmp/dtappint.log LOGFILE=$(mktemp /tmp/dtappint.logXXXXXXXXXXXXXXXX)
PATH=CDE_INSTALLATION_TOP/bin:/usr/bin PATH=CDE_INSTALLATION_TOP/bin:/usr/bin
XCOMM ------------------------------------------------------------------- XCOMM -------------------------------------------------------------------