Re: Possible make_oidjoins_check Security Issue - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: Possible make_oidjoins_check Security Issue
Date
Msg-id 20041020035529.GA15004@dcc.uchile.cl
Whole thread Raw
In response to Re: Possible make_oidjoins_check Security Issue  (Neil Conway <neilc@samurai.com>)
Responses Re: Possible make_oidjoins_check Security Issue
List pgsql-hackers
On Wed, Oct 20, 2004 at 12:52:57PM +1000, Neil Conway wrote:
> On Wed, 2004-10-20 at 06:18, Rod Taylor wrote:
> > http://secunia.com/advisories/12860/
> 
> This seems like a rather inconsequential problem, but it should be
> fixed. The first two ideas that come to mind: use temporary files in
> $PWD rather than /tmp, or create a subdirectory in /tmp to use for the
> temporary files.

Better, use mktemp(1).  The thread testing script already does it IIRC.

-- 
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
"Un poeta es un mundo encerrado en un hombre" (Victor Hugo)



pgsql-hackers by date:

Previous
From: "Greg Sabino Mullane"
Date:
Subject: Re: Time off
Next
From: Tom Lane
Date:
Subject: Re: Possible make_oidjoins_check Security Issue