| tmpnam.3 (fe08efe680f6705e0c60beabe3e39629c655e743) | tmpnam.3 (14243126c56e7862728fa3089310502433337592) |
|---|---|
| 1.\" Copyright (c) 1988, 1991, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" This code is derived from software contributed to Berkeley by 5.\" the American National Standards Committee X3, on Information 6.\" Processing Systems. 7.\" 8.\" Redistribution and use in source and binary forms, with or without --- 176 unchanged lines hidden (view full) --- 185or 186.Xr mktemp 3 . 187.Sh SECURITY CONSIDERATIONS 188The 189.Fn tmpnam 190and 191.Fn tempnam 192functions are susceptible to a race condition | 1.\" Copyright (c) 1988, 1991, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" This code is derived from software contributed to Berkeley by 5.\" the American National Standards Committee X3, on Information 6.\" Processing Systems. 7.\" 8.\" Redistribution and use in source and binary forms, with or without --- 176 unchanged lines hidden (view full) --- 185or 186.Xr mktemp 3 . 187.Sh SECURITY CONSIDERATIONS 188The 189.Fn tmpnam 190and 191.Fn tempnam 192functions are susceptible to a race condition |
| 193occuring between the selection of the file name | 193occurring between the selection of the file name |
| 194and the creation of the file, 195which allows malicious users 196to potentially overwrite arbitrary files in the system, 197depending on the level of privilege of the running program. 198Additionally, there is no means by which 199file permissions may be specified. 200It is strongly suggested that 201.Xr mkstemp 3 --- 43 unchanged lines hidden --- | 194and the creation of the file, 195which allows malicious users 196to potentially overwrite arbitrary files in the system, 197depending on the level of privilege of the running program. 198Additionally, there is no means by which 199file permissions may be specified. 200It is strongly suggested that 201.Xr mkstemp 3 --- 43 unchanged lines hidden --- |