]> git.ipfire.org Git - thirdparty/shadow.git/commit
lib/commonio.c: Use unpredictable temporary names
authorTobias Stoeckmann <tobias@stoeckmann.org>
Sun, 11 Jan 2026 15:33:16 +0000 (16:33 +0100)
committerAlejandro Colomar <foss+github@alejandro-colomar.es>
Wed, 14 Jan 2026 12:05:45 +0000 (13:05 +0100)
commitf8732b17dd1d22e04d8d689ea36e459e7ef1772a
tree9ba5b322b0f5564da22be1a46d56335d4f2585b0
parenta4720918690c79aa31a7fb26d393cc4e747648d1
lib/commonio.c: Use unpredictable temporary names

Make sure that an attacker with sufficient privileges cannot simply
create a file with expected temporary name to retrieve content of
previous and/or future database.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
lib/commonio.c