On Tue, 30.07.13 08:34, Stephen Gallagher (sgallagh@xxxxxxxxxx) wrote: > >> The problem with /tmp is that if you want predictable filenames > >> for the storage, you open yourself to a denial-of-service attack > >> where another user can create a file with the same name. > > > > Well, but that's not unsurmountable, just pick a randomly named > > directory in /tmp and make sure to have a symlink: > > > > ln -s /tmp/krb.XXXXXX "$HOME/.krb-`cat /etc/machine-id`" > > > > Picking a random name brings us back to one of the original problems > we needed to solve: random names make life *miserable* for daemons > like GSSD that need to find the appropriate credentials for a user. Hence give the random name stability via a stable symlink. Please read what I actually wrote. Lennart -- Lennart Poettering - Red Hat, Inc. -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
