Re: Uploaded devscripts 2.0.0 (source all) to master

[Joey Hess <joey@kitenet.net>]

Martin Bialasinski wrote:
> I am also not sure what the problem is. Somone pointed out, that if
> the situation is:
> 
> cd /tmp
> touch abc
> ln -s abc def
> 
> then writing to def would host abc. Ok so far.
> 
> I would program this so:
> 
> rm def
> if not successfull then bail out
> create def
> if not successfull than bail out
> write to def
> 
> Is this unsave? Why?

Race condition.

Please, read up on general /tmp security issues before even thinking about
using files in /tmp. Does anyone have any good urls?

-- 
see shy jo