> Date: Fri, 28 Dec 2001 09:27:43 -0500 (EST)
> From: Jaldhar H. Vyas <[EMAIL PROTECTED]>
> To: debian-mentors@lists.debian.org
> Subject: What should I do about bug #121621?
> Resent-Date: Fri, 28 Dec 2001 09:27:51 -0500 (EST)
> Resent-From: debian-mentors@lists.debian.org
>
> webmin-status sets
* Matt Zimmerman
| Is there some reason that it _should_ fail if the directory already
| exists? Normally, that is not an error condition.
It is a race condition and a possible security hole, since /var/tmp is
publically writeable. If he used some other non-trwxrwxrwx-dir it
would be better.
On Sun, Dec 30, 2001 at 09:45:43AM +0100, Tollef Fog Heen wrote:
> * Matt Zimmerman
>
> | On Sat, Dec 29, 2001 at 04:01:40PM +0100, Tollef Fog Heen wrote:
> |
> | > * Gaetano Paolone
> | > mkdir -p $TMPDIR || exit 1, I presume?
> |
> | Or, uncomment "set -e" and guard whichever commands (pres
--jRHKVT23PllUwdXP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
> Date: Fri, 28 Dec 2001 09:27:43 -0500 (EST)
> From: Jaldhar H. Vyas <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: What should I do about bug #121621?
>
* Matt Zimmerman
| Is there some reason that it _should_ fail if the directory already
| exists? Normally, that is not an error condition.
It is a race condition and a possible security hole, since /var/tmp is
publically writeable. If he used some other non-trwxrwxrwx-dir it
would be better.
On Sun, Dec 30, 2001 at 09:45:43AM +0100, Tollef Fog Heen wrote:
> * Matt Zimmerman
>
> | On Sat, Dec 29, 2001 at 04:01:40PM +0100, Tollef Fog Heen wrote:
> |
> | > * Gaetano Paolone
> | > mkdir -p $TMPDIR || exit 1, I presume?
> |
> | Or, uncomment "set -e" and guard whichever commands (pre
* Matt Zimmerman
| On Sat, Dec 29, 2001 at 04:01:40PM +0100, Tollef Fog Heen wrote:
|
| > * Gaetano Paolone
| > | #DEBHELPER#
| > | ** end postinst ***
| > |
| > | ** begin makedb.sh ***
| > | #!/bin/bash
| > | #set -e
| > | e
* Matt Zimmerman
| On Sat, Dec 29, 2001 at 04:01:40PM +0100, Tollef Fog Heen wrote:
|
| > * Gaetano Paolone
| > | #DEBHELPER#
| > | ** end postinst ***
| > |
| > | ** begin makedb.sh ***
| > | #!/bin/bash
| > | #set -e
| > |
8 matches
Mail list logo