[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#19858: 25.0.50; Docstring bug in make-temp-name
|
From: |
Stefan Monnier |
|
Subject: |
bug#19858: 25.0.50; Docstring bug in make-temp-name |
|
Date: |
Tue, 17 Feb 2015 22:46:41 -0500 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) |
>> make-temp-file can also create a temp file in the user's home directory
>> (so your criticism also applies to the first point).
>> The issue is simply that in cases other than the above two, using
>> make-temp-name is *dangerous*.
> Why's it not dangerous in HOME?
Presumably, HOME is only writable by yourself, so you can presume that
there's no attacker trying play race-condition tricks on you in there to
try and get to run code under your UID.
Stefan