Subject: Re: per-user /tmp
To: None <tech-security@netbsd.org>
From: Christian Biere <christianbiere@gmx.de>
List: tech-security
Date: 02/03/2007 19:51:16
bob smith wrote:
> 
> Elad Efrat wrote:
> >Martin S. Weber wrote:
> >
> >>a) mkdir ${HOME}/tmp
> >>b) export TMPDIR=${HOME}/tmp
> >>c) enjoy
> >>[d) find base-apps ignoring TMPDIR and fix them.]
> >
> >let's divide the work: I'll do (a), (b), and (c), and you do (d).

> Humor in Tech-Security, I am still laughing!

Hmmm, I don't think base-apps are a problem. So it's not that funny,
in my opinion. pkgsrc and others are potentially a problem but then
it's very easy to grep for '[/]tmp'. Before you jump to conclusions,
yes, I've added support for $TMPDIR to one or two apps in the past
(but not much more) and many do already respect it. Mozilla/Firefox
was pain because the printing-related code didn't. I haven't been
using it, so it might be fixed now. FWIIW, TMPDIR is also mentioned by
POSIX.

-- 
Christian