Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-02-02 Thread Hamish
> I'll try to get a CVS package squared away tomorrow. I have just reverted that init.sh $TMPDIR change now, so it should be all set for a fresh checkout, AFAICT. > Best to do it as quickly as possible I think. Yes, I hadn't been keeping up with the Debian Weekly News & the sarge release appear

Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-02-02 Thread Steve Halasz
On Thu, 2005-02-03 at 12:55 +1300, Hamish wrote: > Hi, for those playing along at home, time for a status update: > > > r.terraflow is the only module in GRASS 6.0 CVS which hasn't been fixed > for this bug yet (end user set-able but uses "/var/tmp" as default). > > You can make a GRASS package

Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-02-02 Thread Hamish
Hi, for those playing along at home, time for a status update: r.terraflow is the only module in GRASS 6.0 CVS which hasn't been fixed for this bug yet (end user set-able but uses "/var/tmp" as default). You can make a GRASS package without the r.terraflow module by doing: ./configure --without-

Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-01-30 Thread Hamish
[cc bug lists to archive the link] > This page describes a way to create a secure tmp directory where you > can create tmp files without worrying about their names: > > http://www.linuxsecurity.com/content/view/115462/151/#mozTocId316364 .. > > Maybe someone can help me with this one: > > lib/db/

Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-01-19 Thread Glynn Clements
Hamish wrote: > Just an update re. less-insecure tempfiles .. > > In the upstream GRASS 5.7 CVS[*] pretty much everything in the scripts/ > directory now uses g.tempfile. C modules are next. I am not sure what to > do with the init scripts & libs where the GRASS tempfile fn's may not be > availa

Bug#287651: [GRASS5] [bug #2877] (grass) Insecure tempfile creation

2005-01-17 Thread Hamish
[thanks for the 5.0.3 patch Marga] Just an update re. less-insecure tempfiles .. In the upstream GRASS 5.7 CVS[*] pretty much everything in the scripts/ directory now uses g.tempfile. C modules are next. I am not sure what to do with the init scripts & libs where the GRASS tempfile fn's may not