rzo1 opened a new pull request, #3062:
URL: https://github.com/apache/tomee/pull/3062

   Files.tmpdir() used createTempFile, delete and mkdir, which lets another 
local user claim the name in a shared temp dir. It now uses 
Files.createTempDirectory, which is atomic and owner-only on POSIX. Added a 
test checking distinct directories and permissions.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to