Re: Symlink vulnerabilities

[Michal Zalewski <lcamtuf () coredump cx>]

> In any case, the *right* answer isn't to play whack-a-mole fixing /tmp races,
> what you should be doing is using pam_namespace or similar so each user gets
> their own /tmp namespace.

That would result in counterintuitive behavior, I suppose... /tmp is a
fairly stupid and largely unnecessary artifact of the old.

If you are in charge of a distro, it would not hurt to nuke it
altogether and change all packages in your control to use per-user
$TMPDIR. Some third-party stuff will break - but it breaks every now
and then anyway.

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/