> The answer is simple. A setuid program should simply take care not to write
> anything to /tmp or to $TMPDIR. Both are terribly wrong.
>
> I've suggested "/etc/tmp" as a root-only tmpdir. Or /stmp (analogous to
> /sbin).
>
> I'm hoping varlinks will "solve" this. But I'm biased. Shoot ahead.
>
Wasn't this what /var/run was for?
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu