Re: printing.el PS preview creates world-readable files in /tmp

[Vinicius Jose Latorre]

> > The version 6.8.3 now handles file permission bits (see pr-file-modes
> > option).  The pr-file-modes default value is 0600, that is, only 
the owner
> > session have permissions to handle the newly created files by
> > printing package.
>
> Note that this should only matter for files created in /tmp, but 
those files
> need more than just 0600: they have to be created atomically.
> Browsing through printing.el, I get the impression that it does not 
create
> those files atomically.

How could a file be created atomically in Emacs Lisp?


> When creating files in /tmp, it's very important for security reasons 
to use
> `make-temp-file'.

The printing package uses make-temp-file when creating temporary files using
ghostscript.  Otherwise, it handles only the file name given by 
pr-ps-temp-file
created in the directory given by pr-temp-dir.  The default is 
/tmp/prspool.ps.

What kind of security reasons?


Vinicius