git.annexia.org / libguestfs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f93e8db) | patch
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).
authorRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
committerRichard W.M. Jones <rjones@redhat.com>
Fri, 4 Nov 2011 15:30:12 +0000 (15:30 +0000)
commit6011b1f803ba7308c6a94b9bf6b7212cfccb9f42
tree4749a10c1d399121f05f8647b05c5fa50ad8dc0atree | snapshot
parentf93e8dbb78794029dcc51e8b0d77b5ed4eadac5ecommit | diff
daemon: Don't use files with fixed names in /tmp (thanks Steve Kemp).

Although this doesn't matter for the ordinary (appliance) case, it
matters for the libguestfs live case.  In that case it could cause the
guest to be exploited by a tmp/symlink attack.
daemon/inotify.c diff | blob | history
daemon/tar.c diff | blob | history
[MOVED TO GITHUB] library for accessing and modifying guest disk images