git.annexia.org / libguestfs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bb1be6c) | patch
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).
authorRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
committerRichard W.M. Jones <rjones@redhat.com>
Thu, 10 Nov 2011 10:49:01 +0000 (10:49 +0000)
commit75774298441d8229b31f7dd5dddb399f2b0d5f7c
tree8b38164568119261aa1fbc043dc9673e486a4daatree | snapshot
parentbb1be6cbae4030fd3089ad7385c5132010d40b9acommit | diff
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).

Although this doesn't matter for the ordinary (appliance) case, it
matters for the libguestfs live case.  In that case it could cause the
guest to be exploited by a tmp/symlink attack.
(cherry picked from commit 6011b1f803ba7308c6a94b9bf6b7212cfccb9f42)
daemon/inotify.c diff | blob | history
daemon/tar.c diff | blob | history
[MOVED TO GITHUB] library for accessing and modifying guest disk images