Re: Possible make_oidjoins_check Security Issue
Alvaro Herrera <alvherre@dcc.uchile.cl>
From: Alvaro Herrera <alvherre@dcc.uchile.cl>
To: Neil Conway <neilc@samurai.com>
Cc: Rod Taylor <pg@rbt.ca>, PostgreSQL Development <pgsql-hackers@postgresql.org>
Date: 2004-10-20T03:55:29Z
Lists: pgsql-hackers
On Wed, Oct 20, 2004 at 12:52:57PM +1000, Neil Conway wrote: > On Wed, 2004-10-20 at 06:18, Rod Taylor wrote: > > http://secunia.com/advisories/12860/ > > This seems like a rather inconsequential problem, but it should be > fixed. The first two ideas that come to mind: use temporary files in > $PWD rather than /tmp, or create a subdirectory in /tmp to use for the > temporary files. Better, use mktemp(1). The thread testing script already does it IIRC. -- Alvaro Herrera (<alvherre[a]dcc.uchile.cl>) "Un poeta es un mundo encerrado en un hombre" (Victor Hugo)