Commit0f7a2a5

committed

Create temporary files securely.

1 parenta809899 commit0f7a2a5Copy full SHA for 0f7a2a5

File tree

+16

-5

lines changed

+16

-5

lines changed

Lines changed: 16 additions & 5 deletions

Original file line number	Diff line number	Diff line change
`@@ -10,12 +10,23 @@`
`10`	`10`	`# Caution: you may need to use GNU awk.`
`11`	`11`	`AWK=${AWK:-awk}`
`12`	`12`
`13`		`-INPUTFILE="tmp$$a"`
`14`		`-DUPSFILE="tmp$$b"`
`15`		`-NONDUPSFILE="tmp$$c"`
`16`		`-rm -f$INPUTFILE$DUPSFILE$NONDUPSFILE`
	`13`	`+TMP="/tmp/$$"`
	`14`	`+trap"rm -rf$TMP" 0 1 2 3 15`
`17`	`15`
`18`		`-trap"rm -f$INPUTFILE$DUPSFILE$NONDUPSFILE" 0 1 2 3 15`
	`16`	`+# Create a temporary directory with the proper permissions so no one can`
	`17`	`+# intercept our temporary files and cause a security breach.`
	`18`	+OMASK="`umask`"
	`19`	`+umask 077`
	`20`	`+if! mkdir$TMP`
	`21`	`+thenecho"Can't create temporary directory$TMP."1>&2`
	`22`	`+exit 1`
	`23`	`+fi`
	`24`	`+umask"$OMASK"`
	`25`	`+unset OMASK`
	`26`	`+`
	`27`	`+INPUTFILE="$TMP/a"`
	`28`	`+DUPSFILE="$TMP/b"`
	`29`	`+NONDUPSFILE="$TMP/c"`
`19`	`30`
`20`	`31`	`# Read input`
`21`	`32`	`cat"$@">$INPUTFILE`

Comments

(0)