oss-sec mailing list archives

Re: Fw: Security risk of vim swap files


From: Jakub Wilk <jwilk () jwilk net>
Date: Wed, 1 Nov 2017 19:02:22 +0100

* Jeffrey Walton <noloader () gmail com>, 2017-11-01, 11:31:
Code and scripts certainly need to check TMPDIR

Unfortunately, glibc's implementation of tmpfile(3), which is the most fool-proof interface for dealing with temporary files that the C library offers, doesn't honour TMPDIR. :(

BTW, there's a preloadable library that catches writes to /tmp:
https://github.com/paultag/tmperamental

--
Jakub Wilk


Current thread: