Re: Temporary files written to predetermined location during build

On 11/09/17 10:07, Rene Engelhard wrote:
> > that definitely looks like a bug, it should create that inside some
> > random subdirectory..

> Yes, especially as/tmp/<something predictable> is (also) a security-related bug
> (possible symlink attack)..
>
> See alsohttp://bugs.debian.org/875415  which I just received...

My experience of /tmp is that most things seem to create and write to 
/tmp/username or similar - it's odd to write straight into /tmp.

And that I guess is what's behind the original bug reported - the first 
user obviously created a directory with permissions set for him, then 
the second user came along, tried to use the same directory, and without 
write permission the second build fell over. (Obviously, whether that 
happens depends on how fast the reaper reaps the contents of /tmp.)

Cheers,
Wol