I wonder if setting the temp directory to a hidden directory would also make it 
more secure.

--- On Thu, 2/18/10, Leland F. Jackson, CPA <lela...@mail.smvfp.com> wrote:

> From: Leland F. Jackson, CPA <lela...@mail.smvfp.com>
> Subject: Re: [NF] How secure are temp files under Windows XP (and higher) and 
> Linux?
> To: "ProFox Email List" <profox@leafe.com>
> Date: Thursday, February 18, 2010, 2:33 PM
> In Fedora 11 the permissions assigned
> on the /tmp directory are:
> 
> drwxrwxr-x
> 
> or
> 
> owner =rwx
> group = rwx
> other = r-x
> 
> If I create a file in /tmp directory as user leland, (eg
> touch 
> test-tmp), I get the following:
> 
> -rw-rw-r--  leland   leland
> 
> or
> 
> owner = -rw   leland
> group = -rw   leland
> other =  -r-
> 
> I hope this helps.
> 
> Regards,
> 
> LelandJ
> 
> 
> 
> 
> 
> 
> 
> On 02/18/2010 01:09 PM, Malcolm Greene wrote:
> > I'm doing a code review of an application that
> occassionally (and
> > temporarily) writes blocks of secure data to temp
> files.
> >
> > While the code in question is Python 2.6 (using
> > tempfile.TemporaryFile( delete=True )), I believe the
> question is
> > general enough to be asked in this forum..
> > Are there OS specific nuances I should be concerned
> about when
> > using temp files on Windows (XP or higher) or Linux?
> >
> > Thanks,
> > Malcolm
> >
> >
> > --- StripMime Report -- processed MIME parts ---
> > multipart/alternative
> >    text/plain (text body -- kept)
> >    text/html[excessive quoting removed by server]

_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/114630.32163...@web31408.mail.mud.yahoo.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to