On Tue, 2013-07-30 at 02:08 +0200, Lennart Poettering wrote: > On Mon, 29.07.13 23:56, David Woodhouse (dwmw2@xxxxxxxxxxxxx) wrote: > > > On Tue, 2013-07-30 at 00:50 +0200, Lennart Poettering wrote: > > > So, why don't you revert to using /tmp then? > > > > The problem with /tmp is that if you want predictable filenames for the > > storage, you open yourself to a denial-of-service attack where another > > user can create a file with the same name. > > Well, but that's not unsurmountable, just pick a randomly named > directory in /tmp and make sure to have a symlink: > > ln -s /tmp/krb.XXXXXX "$HOME/.krb-`cat /etc/machine-id`" What would create this directory ? > to give it a stable, machine-local name. in what case /tmp contains non-'machine-local' files ? Also I need one directory per-user and not per-machine. And how is this different than /run/kerberos in the end ? Simo. -- Simo Sorce * Red Hat, Inc * New York -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
