From mboxrd@z Thu Jan 1 00:00:00 1970 From: Skip Tavakkolian Content-Type: multipart/alternative; boundary=Apple-Mail-3D0ABF21-C73A-490B-BE65-4B1F3E1AE722 Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (1.0) Message-Id: Date: Thu, 4 Dec 2014 19:20:53 -0800 References: <20141203234918.GA27533@free.fr> In-Reply-To: To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Subject: Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp Topicbox-Message-UUID: 33b9d1a0-ead9-11e9-9d60-3106f5b1d025 --Apple-Mail-3D0ABF21-C73A-490B-BE65-4B1F3E1AE722 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable +1 =F0=9F=98=84 > On Dec 4, 2014, at 7:08 PM, Bruce Ellis wrote: >=20 > Don't these people have better things to do than finding non-bugs in syste= ms they don't understand? >=20 > brucee >=20 >> On 5 December 2014 at 13:33, Charles Forsyth w= rote: >>=20 >>> On Wed, Dec 3, 2014 at 11:49 PM, St=C3=A9phane Aulery w= rote: >>> discovered that rc >>> creates temporary files in an insecure way: >>=20 >> rc was built for a system that made /tmp secure by not sharing it (it's a= lways private to a user and even sometimes to a set of processes). >> That way not every app has to try to help sustain the pretence that a sha= red /tmp can really be secured (+s bits, EXCL create, etc..) >> Obviously the version for Unix will have to change its generation scheme t= o fit in. >=20 --Apple-Mail-3D0ABF21-C73A-490B-BE65-4B1F3E1AE722 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
+1 =F0=9F=98=84


= On Dec 4, 2014, at 7:08 PM, Bruce Ellis <bruce.ellis@gmail.com> wrote:

Don't these people have better things to do tha= n finding non-bugs in systems they don't understand?

bruc= ee

On 5= December 2014 at 13:33, Charles Forsyth <charles.forsyth@gmail.com<= /a>> wrote:

On We= d, Dec 3, 2014 at 11:49 PM, St=C3=A9phane Aulery <saulery@free.fr> wrote:
d= iscovered that rc
   creates temporary files in an insecure way:
<= /div>
rc was built for a system that made /tmp secure by not shari= ng it (it's always private to a user and even sometimes to a set of processe= s).
That way not every app has to try to hel= p sustain the pretence that a shared /tmp can really be secured (+s bits, EX= CL create, etc..)
Obviously the version for U= nix will have to change its generation scheme to fit in.

= --Apple-Mail-3D0ABF21-C73A-490B-BE65-4B1F3E1AE722--