Bugtraq mailing list archives

Re: Tired of /tmp? Here's a proposed solution

From: ig25 () mvmampc66 ciw uni-karlsruhe de (Thomas Koenig)
Date: Wed, 28 Aug 1996 10:28:51 +0200


Guido M. Witmond wrote:

Well, this is a good quick hack. What about removing the CONCEPT of
public writable filesystems like /tmp.


Agree 100%.

The best solution would be, IMHO, to give each user his or her
personal temporary directory, under /tmp/username, mode 700.
/tmp can stay 1777 for stuff like make files accessible to other
users.

Comments?
--
Thomas Koenig, Thomas.Koenig () ciw uni-karlsruhe de, ig25@dkauni2.bitnet.
The joy of engineering is to find a straight line on a double
logarithmic diagram.

Current thread:

Re: Vulnerability in the Xt library, (continued)
- Re: Vulnerability in the Xt library Casper Dik (Aug 26)
- r00t advisory -- Sunny Day Virus Gregory Hull (Aug 26)
- r00t advisroy -- sol2.5 at(1) vunerability Gregory Hull (Aug 26)
- r00t advisory -- workman vunerability Gregory Hull (Aug 26)
- r00t advisory -- sol2.5 su(1M) vunerability Gregory Hull (Aug 26)
- SGI Security Advisory 19960802-01 - Vulnerability in expreserve SGI Security Coordinator (Aug 26)
- Privileges (was libresolv+ bug) Paul McNabb (Aug 26)
- [BUG] Vulnerability in PINE Sean B. Hamor (Aug 26)
  - Tired of /tmp? Here's a proposed solution Igor Chudov @ home (Aug 26)
    - Re: Tired of /tmp? Here's a proposed solution Guido M. Witmond (Aug 27)
    - Re: Tired of /tmp? Here's a proposed solution Thomas Koenig (Aug 28)
    - Re: Tired of /tmp? Here's a proposed solution Sean B. Hamor (Aug 28)
    - Re: Tired of /tmp? Here's a proposed solution mdr () vodka sse att com (Aug 28)
    - Rlogin vulnerabilty Gabriele Avosani (Aug 28)
    - Re: Tired of /tmp? Here's a proposed solution Matthew J Brown (Aug 28)
    - ftpbounce-0.1.tar.gz Rune Braathen (Aug 27)
  - Re: [BUG] Vulnerability in PINE Rage-303.tr (Aug 27)
    - Re: [BUG] Vulnerability in PINE Linux Mailing Lists (Aug 28)
    - Re: [BUG] Vulnerability in PINE Sean B. Hamor (Aug 28)
    - Re: [BUG] Vulnerability in PINE Jason Haar (Aug 29)
    - HOLE: Unixware 2.03: crontab -e Hannu Laurila (Aug 29)

(Thread continues...)