| Subject: | Test failures possible (because of File::Temp->safe_level) |
My smoker machines just generated a couple of fail reports running the SGML-Parser-OpenSP test suite. The test fails look like this:
...
not ok 4 - parse_string with temp file name
# Failed test 'parse_string with temp file name'
# at t/20passfd.t line 31.
# died: Error in tempfile() using template /var/tmp/cpansmoker-1023/2016022715/XXXXXXXXXX: Parent directory (/var/tmp/cpansmoker-1023/2016022715/) is not safe (Sticky bit not set on /var/tmp/cpansmoker-1023/2016022715/ when dir is group|world writable) at /tmpfs/.cpan-build-cpansand/2016022715/SGML-Parser-OpenSP-0.994-0Pkstj/blib/lib/SGML/Parser/OpenSP.pm line 65.
...
The diagnostics is correct --- TMPDIR is set to a different directory than /tmp and this directory has rwxrwxr-x permissions. But in this case the group is a "safe" one, so IMHO there's not security problem here.
I think it's better to remove the File::Temp->safe_level completely. This is a global setting which should go into a calling script, not into a module.
Regards,
Slaven