[Lynx-dev] Re: Bug#267356: lynx-cur: mystery meat directories in /tmp

[Thomas Dickey]

On Thu, 23 Sep 2004, Dan Jacobson wrote:

> A> Well, if you set LYNX_TEMP_SPACE=~/.lynxtmp and created
> >>
> >> But I like the tmp files to be in /tmp, I just want it to be clear
> >> upon even just a quick look, and by default with no extra settings, to
> >> all people who look, what program is doing it, else one might think it
> >> is some Trojan horse program.
>
> A> I asked the upstream and got a reply as follows:
>
> >> He thinks it's bad because he can't tell which session of lynx is
> >> associated with a given file.  That would be nice, but that's one of
> >> the details that would make it less secure.
>
> A> So I think this is not a bug.
>
> A wishlist item actually.
>
> I'm saying that there is a directory in /tmp that should reveal via
> its name that it was created by lynx (and not by e.g., gimp), that's all.

I don't recall anyone complaining before about that aspect.  Perhaps it
should be configurable in some sense.   lynx's temporary files also don't
offer much clue (a leading "L" is about all).

> Let's look around /tmp on my computer:
> orbit-jidanni/ esrv1000-jidanni1= ssh-szuwiB1755/ gconfd-jidanni/
> See, the trend these days is to put what program made the dir out in front.
>
> A> BTW, I forwarded some of your reports to the upstream
> A> and had an impression that it would be better if you
> A> subscribe to address@hidden and send your request
> A> to the upstream directly.
>
> Yes. I'll send this directly too and see if I am still/ever was subscribed.

not to my recollection - just the Debian mailing lists.

-- 
Thomas E. Dickey
http://invisible-island.net
ftp://invisible-island.net