[Dune] [#958] do not write random files to the user's home directory

Dune flyspray at dune-project.org
Wed Oct 5 00:49:46 CEST 2011


THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#958 - do not write random files to the user's home directory
User who did this - Jö Fahlke (joe)

----------
.dune.resume is not a configuration file, but neither is it a temporary file. It is a file carrying program state from one run of a program to the next.  System services like daemons would keep files like this somewhere in the /var hierarchy.

There is also another reason not to put .dune.resume into /tmp: security.  Since /tmp is world-writable there are all kinds of funny races and attacks possible.  And since the resume file persists across program runs, the standard techniques for temporary files don't work here.  We don't want to open that can of worms.

----------

More information can be found at the following URL:
http://www.dune-project.org/flyspray/index.php?do=details&task_id=958#comment2735

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.




More information about the Dune mailing list