Subject: Re: mktemp() and directories
To: None <lukem@connect.com.au>
From: Todd C. Miller <Todd.Miller@courtesan.com>
List: tech-security
Date: 06/09/1997 10:02:00
In message <199706091153.VAA28885@shara.off.connect.com.au>
	so spake Luke Mewburn (lukem):

> I've been asked about the implications of mktemp() for creating
> temporary directories.  There was a concern that there may be
> exploitable race conditions.

You can still do a denial of service attack.  You just have to
get in that window between the mktemp(3) and the mkdir(2).
Now, if you were to catch EEXIST and redo mktemp(3) a number
of times....

 - todd