> But there's a race condition, and I think that the name with the
> suffix can easily be guessed from the file that has just been
> created. For instance, the suffix can often be ".pdf". Or perhaps

Oops, I tend to see DoS as separate and latter to security :)

> you can add random characters before the suffix, and in case of

Random chars from where?
So if mktemp deprecated/missing, mkstemps missing, suffix
wanted does that leave effectively open( random() )?
What current platforms are missing/unusable mkstemps?

Reply via email to