On Aug 6, 2013, at 11:19 AM, Andrew Dalke wrote:
> In short, I don't see any way to get what you want with /tmp and still be 
> secure in a multi-user system with possible malicious users. Your safer bet 
> is to default to a $HOME/.ply-cache directory.

I thought of one. If there's a $HOME/.ply-secret which is r------ then its 
contents can be used as a secret key for some cryptographically strong 
mechanism used to generate the actual filename. 

This at least would solve the garbage collection problem that a 
$HOME/.ply-cache directory might have.

Cheers,

                                Andrew
                                [email protected]


-- 
You received this message because you are subscribed to the Google Groups 
"ply-hack" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ply-hack/42C99A7C-F254-453D-A725-1141344CD669%40dalkescientific.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to