←back to thread

Against /Tmp

(dotat.at)
140 points todsacerdoti | 1 comments | 22 Oct 24 12:36 UTC | HN request time: 0.001s | source
Show context
josephcsible ◴[22 Oct 24 14:43 UTC] No.41914801[source]▶
If you're opening with O_CREAT|O_EXCL, why does it matter whether the filename is predictable?
replies(2): >>41914941 #>>41915153 #
kijin ◴[22 Oct 24 14:58 UTC] No.41914941[source]▶
Because other processes can periodically check whether a predictable filename is in use, and guess things you'd rather keep private?
replies(2): >>41915014 #>>41916172 #
1. josephcsible ◴[22 Oct 24 16:49 UTC] No.41916172[source]▶
But you wouldn't need to guess names to do that, since the names of files in /tmp are publicly listable.