Re: Insecure use of file in /tmp by trn

[Todd.Miller () COURTESAN COM (Todd C. Miller)]

In message <Pine.BOO.4.04.9908281306590.2468-100000 () oubliette annexgrp org>
        so spake Shuman (shuman):

> RedHat includes a mktemp too, its a package by itself. From the look of
> the manpage, it seems to be based on the mktemp that comes with Debian,
> just with one extra option. The option is "-d", which creates a unique
> directory rather than a file.

This is the OpenBSD mktemp(1), I know since I wrote it :-)
RedHat 6.0 ships with an mktemp-1.5 rpm that corresponds to:
    $OpenBSD: mktemp.c,v 1.4 1997/06/20 04:17:42 millert Exp $
The current OpenBSD mktemp.c (1.5) is identical with the exception
of a slightly more relaxed copyright.  For some reason RedHat doesn't
document the -d option in the main page though.  Just to clear up
the confusion...

 - todd