> But there's a race condition, and I think that the name with the > suffix can easily be guessed from the file that has just been > created. For instance, the suffix can often be ".pdf". Or perhaps
Oops, I tend to see DoS as separate and latter to security :) > you can add random characters before the suffix, and in case of Random chars from where? So if mktemp deprecated/missing, mkstemps missing, suffix wanted does that leave effectively open( random() )? What current platforms are missing/unusable mkstemps?