Skip Menu |

This queue is for tickets about the Proc-SafeExec CPAN distribution.

Report information
The Basics
Id: 32458
Status: resolved
Priority: 0/
Queue: Proc-SafeExec

People
Owner: Nobody in particular
Requestors: ANDK [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: Important
Broken in: 1.1
Fixed in: (no value)



Subject: Cleaning up /tmp directory; predictable tmp filenames
The testsuite leaves two files behind: -rw-rw-r-- 1 sand sand 61 Jan 20 17:52 Proc-SafeExec-test1.txt -rw-rw-r-- 1 sand sand 61 Jan 20 17:52 Proc-SafeExec-test2.txt Thanks for using filenames that identify you as the originator, but I'd like to point out that predictable filenames in /tmp have security implications when people run these tests as root (what they often do). So please use File::Temp to get unpredictable names and better even: to get the files removed after use. Thanks!
Fixed. Thanks for the report. And to think, I wrote this to improve the security of my coworkers' code. {sigh}