I wrote a while ago: > I slightly wonder about the writing of the tmp file > open("/tmp/gv_random_some.pdf.tmp", O_WRONLY|O_CREAT|O_TRUNC, 0666) > from within gs (no O_EXCL so would follow a symlink allowing clobber).
It is not for gs to verify the security of the tmp file passed as argument (it cannot do that), but gv should pre-create the file in a safe way. Cheers, Paul Paul Szabo p...@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org