Use O_TMPFILE (on systems that support it) to security create a temporary

file that is inaccessible to any other process.

FossilOrigin-Name: 4609ba34b8b4a6df4cd28e39d19f96e59580db0e838f1aa605cc00ea003c2a85

diff --cc manifest
index e54b703b65938036b8ad628d1d97e25bd7d9f8e4,793dd97f512c033d43444acc41128975f3d799a1..71e45fdc377a38bcd48d61e4a592ae5cfe5f01cd
--- 1/manifest
--- 2/manifest
+++ b/manifest
@@@ -1,5 -1,5 +1,5 @@@
- C Updates\sto\stestrunner.tcl:\s\sShorten\sthe\sprefix\son\screated\ssubdirectories\sfrom\n"testrunner_bld_"\sto\sjust\s"testrun_".\s\sDo\snot\sappend\s".exe"\sto\sthe\snames\sof\ncreated\ssubdirectories.\s\sAdd\sthe\s"clean"\scommand\sto\srecursively\sremove\sall\nsubdirectories\sand\sfiles\screated\sby\sa\stest\srun.
- D 2026-04-09T16:08:29.996
 -C Make\suse\sof\sO_TMPFILE\sfor\smore\ssecure\stemporary\sfile\screation,\swhen\sthat\noption\sis\savailable.
 -D 2026-04-09T14:12:09.859
++C Use\sO_TMPFILE\s(on\ssystems\sthat\ssupport\sit)\sto\ssecurity\screate\sa\stemporary\nfile\sthat\sis\sinaccessible\sto\sany\sother\sprocess.
++D 2026-04-09T16:16:39.462
  F .fossil-settings/binary-glob 61195414528fb3ea9693577e1980230d78a1f8b0a54c78cf1b9b24d0a409ed6a x
  F .fossil-settings/empty-dirs dbb81e8fc0401ac46a1491ab34a7f2c7c0452f2f06b54ebb845d024ca8283ef1
  F .fossil-settings/ignore-glob 35175cdfcf539b2318cb04a9901442804be81cd677d8b889fcc9149c21f239ea
@@@ -2197,8 -2197,11 +2197,9 @@@ F tool/warnings-clang.sh bbf6a1e685e534
  F tool/warnings.sh a554d13f6e5cf3760f041b87939e3d616ec6961859c3245e8ef701d1eafc2ca2
  F tool/win/sqlite.vsix deb315d026cc8400325c5863eef847784a219a2f
  F tool/winmain.c 00c8fb88e365c9017db14c73d3c78af62194d9644feaf60e220ab0f411f3604c
- P 4c2a5c9bb40c63bb9d0f633f78d132bdd69b9d755d4e6d5e3cb534e63b383a4e
- R e4d712ce556ffb97f0dc40bbf98f6c34
 -P 4525003a53a7fc63ca75c59b22c79608659ca12f0131f52c18637f829977f20b
 -R 8620cf4411d3ee800e21795293030726
 -T *branch * o_tmpfile
 -T *sym-o_tmpfile *
 -T -sym-trunk *
++P 450c7edf1247024db4b66f38bf9561c5c6b0c4175c4df8de17019aea6cbde5cf 094fc6da0768ea0ec4b4d3dc020cd6025aab341550d6cea6be7487ac570f9171
++R 3859e15f84d69d9c5d2ca3a8aab9bbbc
++T +closed 094fc6da0768ea0ec4b4d3dc020cd6025aab341550d6cea6be7487ac570f9171
  U drh
- Z 9ff03cf26c35e2228f544c567c67b650
 -Z c35d74d8270d74b882ed210a9b661389
++Z f2afa9c19f08115f7108ad30dacf8d8a
  # Remove this line to create a well-formed Fossil manifest.

diff --cc manifest.uuid
index 31d90ac5aa13427a3cd6a2fbfa004251ba43decd,c42af0fd62846f9a1f2c8bf838629b1bc75201e9..3b6dd0b9aae0b4fa68a35c6666096eb860265e43
--- 1/manifest.uuid
--- 2/manifest.uuid
+++ b/manifest.uuid
@@@ -1,1 -1,1 +1,1 @@@
- 450c7edf1247024db4b66f38bf9561c5c6b0c4175c4df8de17019aea6cbde5cf
 -094fc6da0768ea0ec4b4d3dc020cd6025aab341550d6cea6be7487ac570f9171
++4609ba34b8b4a6df4cd28e39d19f96e59580db0e838f1aa605cc00ea003c2a85