From: Micah Anderson Date: Wed, 28 Sep 2005 14:47:51 +0000 (+0000) Subject: Fixed insecure temporary file creation X-Git-Tag: backupninja-0.9~10 X-Git-Url: https://git.stderr.nl/gitweb?a=commitdiff_plain;ds=sidebyside;h=d9d59cd6e90cb745d8886d6376a0ed97eb6761ef;p=matthijs%2Fupstream%2Fbackupninja.git Fixed insecure temporary file creation --- diff --git a/backupninja b/backupninja index e5c55ae..d52f4cd 100755 --- a/backupninja +++ b/backupninja @@ -305,7 +305,14 @@ function process_action() { let "actions_run += 1" # call the handler: - local bufferfile="/tmp/backupninja.buffer.$$" + [ if -x /bin/mktemp ] + then + local bufferfile=`mktemp /tmp/backupninja.buffer.XXXXXXXX` + else + DATE=`date` + sectmp=`echo $DATE | /usr/bin/md5sum | cut -d- -f1` + local bufferfile=/tmp/backupninja.buffer.$sectmp + fi echo "" > $bufferfile echo_debug_msg=1 ( diff --git a/changelog b/changelog index 13b6cd1..8ba0ab5 100644 --- a/changelog +++ b/changelog @@ -1,4 +1,5 @@ removed erroneous magic file marker in pgsql handler + fixed insecure temporary file creation version 0.8 -- September 15 2005 added pgsql (PostgreSQL) handler, with vservers support. added vservers support to duplicity handler