Skip to content

clean up tempfile module and rm FIXME #4506

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 20, 2013
Merged

clean up tempfile module and rm FIXME #4506

merged 1 commit into from
Jan 20, 2013

Conversation

thestinger
Copy link
Contributor

I can't really think of a use case for a randomized directory name which other users have read/write permissions on. If there is some edge case, it can be dealt with by doing a chmod after the fact (but you can't do the security retroactively).

Closes #2349.

This removes the FIXME suggesting that mkdtemp should rely on the
default umask, because that would make it unusable for making a secure
work area in a world writable directory (have to assume that other users
have created files, directories, hard links, etc. in your directory).
The POSIX mkdtemp function creates a directory with 700 permissions to
avoid this problem.
catamorphism added a commit that referenced this pull request Jan 20, 2013
clean up tempfile module and rm FIXME
@catamorphism catamorphism merged commit 0a8c039 into rust-lang:incoming Jan 20, 2013
@catamorphism
Copy link
Contributor

Looks good, thanks!

@thestinger thestinger deleted the mkdtemp branch January 20, 2013 22:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants