LYNX-DEV Lynx and /tmp/ (was: Lynx 2.6)

[Klaus Weide]

On Mon, 19 May 1997, Jim Spath (Webmaster Jim) wrote:

> This issue (/tmp being world writable) has been discussed here recently.
> No fix has yet been implemented, but here is a workaround:
> 
> In the global .profile for your Lynx users, do this:
> 
> LYNX_TEMP_SPACE=$HOME/.lynx ; export LYNX_TEMP_SPACE

(or change the default for TEMP_SPACE in userdefs.h and recompile)

> Create the $HOME/.lynx directory for all users, owned by that user
> and writable by them only.

That is the simplest (and probably safest) solution.

If it is unacceptable to have all those temp files in user filespace,
i.e. you still want them under /tmp/ or similar, You could

1) put the real lynx executable in a wrapper script which first creates
   a unique directory under /tmp/ - see
   <http://www.flora.org/lynx-dev/html/month0597/msg00296.html>
   for an example.  (This may still be vulnerable to redirecting the
   directory itself.)

2) See <http://www.flora.org/lynx-dev/html/month0597/msg00501.html>
   for a pointer to patches against Lynx 2.7.1. 
   (Read the caveats.  I don't know whether anyone else has tested it
   at all.)

I thought someone was going to work further on these...

     Klaus



;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;