|
From: | Sven Joachim |
Subject: | Re: creating backups in temporary directories |
Date: | Fri, 07 Sep 2007 21:49:52 +0200 |
User-agent: | Gnus/5.11 (Gnus v5.11) Emacs/22.1.50 (gnu/linux) |
Stefan Monnier <address@hidden> writes: >>> Suggestions: >>> 1) make that the default value - why not write backups in /tmp? > >> Because making a "backup" for a file in a place that is regularly >> cleaned out is creating an illusion of security. > > Worse yet: creating backup files in /tmp would be a security hole: > some other user seeing you're currently editing /tmp/foo could create > a symlink /tmp/foo~ to some interesting place and then when you save your > file the backup could be placed at that interesting place chosen by > the attacker. Really? I've just tried this (with a symlink in ~/tmp instead of /tmp), and Emacs removed the symlink for the backup before saving the file. Are there circumstances where it might not do this?
[Prev in Thread] | Current Thread | [Next in Thread] |