git.annexia.org / libguestfs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 267ddc5) | patch
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).
authorRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
committerRichard W.M. Jones <rjones@redhat.com>
Wed, 9 Nov 2011 22:06:58 +0000 (22:06 +0000)
commit95ee3c98cf37dee3806cb9e8cdab1d1f024ae0e5
tree7138dc36cdd989c8d08c7b11503fbfa96a13766ftree | snapshot
parent267ddc57545f7790faee1e107e84c9f1428c57d1commit | diff
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).

Although this doesn't matter for the ordinary (appliance) case, it
matters for the libguestfs live case.  In that case it could cause the
guest to be exploited by a tmp/symlink attack.
(cherry picked from commit 6011b1f803ba7308c6a94b9bf6b7212cfccb9f42)
daemon/inotify.c diff | blob | history
daemon/tar.c diff | blob | history
[MOVED TO GITHUB] library for accessing and modifying guest disk images