git.annexia.org / libguestfs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7aae04e) | patch
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).
authorRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
committerRichard W.M. Jones <rjones@redhat.com>
Wed, 9 Nov 2011 22:16:19 +0000 (22:16 +0000)
commit051fc05ccce87a41b97fc527acd42fc1161e849d
tree3938b32c7a2d9a12395bc3e2c3bc0a65b78c4854tree | snapshot
parent7aae04efa09e95773bda1e6a637fd38bfa2d076ecommit | diff
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).

Although this doesn't matter for the ordinary (appliance) case, it
matters for the libguestfs live case.  In that case it could cause the
guest to be exploited by a tmp/symlink attack.
(cherry picked from commit 6011b1f803ba7308c6a94b9bf6b7212cfccb9f42)
daemon/inotify.c diff | blob | history
daemon/tar.c diff | blob | history
[MOVED TO GITHUB] library for accessing and modifying guest disk images