|
From: | Stefan Monnier |
Subject: | Re: Finalizing 'inhibit-automatic-native-compilation' |
Date: | Mon, 20 Feb 2023 11:02:09 -0500 |
User-agent: | Gnus/5.13 (Gnus v5.13) |
> Before e6043641d30 the file was created by Fmake_temp_file_internal and > afterwards overwritten by libgccjit. Yes, that was good. > So I guess one could remove the file after the first creation and make > it a link pointing to some other file waiting for libgccjit to do > its write. "One" as in "an attacker"? In `/tmp` an attacker should not be able to do that because it's supposed to be using the sticky bit so that only the owner of a file can remove it. Stefan
[Prev in Thread] | Current Thread | [Next in Thread] |