external/cde
1
0
Fork 0
mirror of git://git.code.sf.net/p/cdesktopenv/code synced 2025-03-09 15:50:02 +00:00
Code Issues Releases Wiki Activity

SECURITY fix for dtappintegrate: Use mktemp(1) to generate a template.

Browse source 
Using a fixed filename in /tmp is just begging for a symlink attack ...
This commit is contained in:
Pascal Stumpf 2013-07-23 00:59:23 +02:00 • committed by Jon Trulson
parent 6c42732461
commit f9a70b5165
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
cde/programs/dtappintegrate/dtappintegrate.src
View file

@ -300,7 +300,7 @@ FRONTPANEL_FILES=*.fp
APPMAN_FILES="(*)" APPMAN_FILES="(*)"
ID=$(id) ID=$(id)
LOGFILE=/tmp/dtappint.log LOGFILE=$(mktemp /tmp/dtappint.logXXXXXXXXXXXXXXXX)
PATH=CDE_INSTALLATION_TOP/bin:/usr/bin PATH=CDE_INSTALLATION_TOP/bin:/usr/bin
XCOMM ------------------------------------------------------------------- XCOMM -------------------------------------------------------------------