Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 6 Mar 2000 03:23:44 -0500
From:      Garance A Drosihn <drosih@rpi.edu>
To:        Chris Wasser <cwasser@v-wave.com>, current@FreeBSD.ORG
Subject:   Re: oddness in -current
Message-ID:  <v04210114b4e91ac8525f@[128.113.24.47]>
In-Reply-To: <20000306001706.A32145@area51.v-wave.com>
References:  <20000306001706.A32145@area51.v-wave.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 12:17 AM -0700 3/6/00, Chris Wasser wrote:
>I was just watching a buildworld happen when I noticed (specifically
>in gcc, and a few other places) the following warning several times:
>
>warning: mktemp() possibly used unsafely; consider using mkstemp()
>
>I'm not sure if it's a big deal or not, but in the interests of
>satisfying my own interests, I thought I would mention it. If this
>has been covered already in this list, then please disregard. Next
>time I'll capture the entire build process to a file.

This probably has not been discussed a lot on current, but the
freebsd-audit group has been trying to track down and change
all uses of mktemp which might lead to any kind of security
problem.


---
Garance Alistair Drosehn           =   gad@eclipse.acs.rpi.edu
Senior Systems Programmer          or  drosih@rpi.edu
Rensselaer Polytechnic Institute


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v04210114b4e91ac8525f>