"Traditionally, many shell scripts take the name of the program with the pid as a suffix and use that as a temporary file name"
0
votes
2
answers
135
views
man mktemp
:
> The mktemp utility is provided to allow shell scripts to safely use temporary files. **Traditionally, many shell scripts take the name of the program with the pid as a suffix and use that as a temporary file name.** This kind of naming scheme is predictable and the race condition it creates is easy for an attacker to win.
Could anybody show an example of such a file name? And where can I find such filenames "in real life"?
Asked by jsx97
(1347 rep)
Aug 6, 2024, 08:51 AM
Last activity: Aug 6, 2024, 04:13 PM
Last activity: Aug 6, 2024, 04:13 PM