[Tilesathome] deleting temp folder (was Problem under windows again)
Matthias Julius
lists at julius-net.net
Thu Aug 21 21:15:21 BST 2008
"Martijn van Oosterhout" <kleptog at gmail.com> writes:
> On Thu, Aug 21, 2008 at 9:29 PM, "Marc Schütz" <schuetzm at gmx.net> wrote:
>>> I wanted to call it Z_X_Y to make it easy for somebody trying to debug
>>> things to find the data.
>>
>> You have to be careful if you use fixed or predictable names in /tmp to avoid symlink attacks.
>
> So don't use /tmp but some other directory that doesn't have
> world-write permissions. Enfore that and you don't need to worry about
> the names.
You can also set the working folder's permissions to 700 and nobody
can put a symlink inside.
Matthias
More information about the Tilesathome
mailing list