emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: creating backups in temporary directories


From: David Kastrup
Subject: Re: creating backups in temporary directories
Date: Fri, 07 Sep 2007 21:52:01 +0200
User-agent: Gnus/5.11 (Gnus v5.11) Emacs/22.1.50 (gnu/linux)

Sven Joachim <address@hidden> writes:

> Stefan Monnier <address@hidden> writes:
>
>> Worse yet: creating backup files in /tmp would be a security hole:
>> some other user seeing you're currently editing /tmp/foo could
>> create a symlink /tmp/foo~ to some interesting place and then when
>> you save your file the backup could be placed at that interesting
>> place chosen by the attacker.
>
> Really?  I've just tried this (with a symlink in ~/tmp instead of
> /tmp), and Emacs removed the symlink for the backup before saving
> the file.  Are there circumstances where it might not do this?

Can you spell "race condition"?

-- 
David Kastrup, Kriemhildstr. 15, 44793 Bochum




reply via email to

[Prev in Thread] Current Thread [Next in Thread]