git.annexia.org / libguestfs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 437add2) | patch
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).
authorRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
committerRichard W.M. Jones <rjones@redhat.com>
Wed, 9 Nov 2011 22:16:29 +0000 (22:16 +0000)
commit5248114edea548d142d7c7ce644cea22f7957822
tree8e6a80dc5c2f2989faeecccde10d7d0b424ba4f9tree | snapshot
parent437add2aa86fd81d6979583d58d25bf5cb3d9b0fcommit | diff
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).

Although this doesn't matter for the ordinary (appliance) case, it
matters for the libguestfs live case.  In that case it could cause the
guest to be exploited by a tmp/symlink attack.
(cherry picked from commit 6011b1f803ba7308c6a94b9bf6b7212cfccb9f42)
daemon/inotify.c diff | blob | history
daemon/tar.c diff | blob | history
[MOVED TO GITHUB] library for accessing and modifying guest disk images