From mboxrd@z Thu Jan 1 00:00:00 1970 MIME-Version: 1.0 In-Reply-To: References: <20141203234918.GA27533@free.fr> Date: Fri, 5 Dec 2014 14:08:11 +1100 Message-ID: From: Bruce Ellis To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net> Content-Type: multipart/alternative; boundary=001a11c25cd015e52805096f63e3 Subject: Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp Topicbox-Message-UUID: 33b57966-ead9-11e9-9d60-3106f5b1d025 --001a11c25cd015e52805096f63e3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Don't these people have better things to do than finding non-bugs in systems they don't understand? brucee On 5 December 2014 at 13:33, Charles Forsyth wrote: > > On Wed, Dec 3, 2014 at 11:49 PM, St=C3=A9phane Aulery w= rote: > >> discovered that rc >> creates temporary files in an insecure way: >> > > rc was built for a system that made /tmp secure by not sharing it (it's > always private to a user and even sometimes to a set of processes). > That way not every app has to try to help sustain the pretence that a > shared /tmp can really be secured (+s bits, EXCL create, etc..) > Obviously the version for Unix will have to change its generation scheme > to fit in. > --001a11c25cd015e52805096f63e3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Don't these people have better things to do than findi= ng non-bugs in systems they don't understand?

brucee=

On 5 = December 2014 at 13:33, Charles Forsyth <charles.forsyth@gmail.com= > wrote:
<= div class=3D"gmail_extra">
O= n Wed, Dec 3, 2014 at 11:49 PM, St=C3=A9phane Aulery <= saulery@free.fr>= ; wrote:
discovered that rc
=C2=A0 =C2=A0creates temporary files in an insecure way:
=

rc was built for a system that made /tmp secure by not sha= ring it (it's always private to a user and even sometimes to a set of p= rocesses).
That way not every app has to tr= y to help sustain the pretence that a shared /tmp can really be secured (+s= bits, EXCL create, etc..)
Obviously the ve= rsion for Unix will have to change its generation scheme to fit in.

--001a11c25cd015e52805096f63e3--