[GRASS5] [bug #2961] (grass) lib/gis/unix_socks.c fails unless $TMPDIR is /tmp
Glynn Clements
glynn at gclements.plus.com
Fri Feb 4 06:31:05 EST 2005
Request Tracker wrote:
> I just did a little audit and I think my recenct security fix to
> init.sh introduced a bug. I'd like to fix it ASAP - if not I'll remove
> the $TMPDIR capability and revert to always using /tmp (maybe in the
> next 24 hours).
>
> The bug is this:
>
> init.sh now uses $TMPDIR (if it exists) to place the temporary session
> files in. If $TMPDIR doesn't exist it uses /tmp. Now
> lib/gis/unix_socks.c has "/tmp" hardcoded and I don't know how to do
> the 'if(! $TMPDIR) then "/tmp"' test in C.
unix_socks.c should always use /tmp; using $TMPDIR (which is typically
a subdirectory of $HOME) might exceed the limit for a Unix-domain
socket.
--
Glynn Clements <glynn at gclements.plus.com>
More information about the grass-dev
mailing list