From: Paul Mackerras Date: Sun, 15 Jun 2014 04:57:52 GMT Subject: Re: [PATCH] gitk: use mktemp -d to avoid predictable temporary directories Message-ID: <20140615045752.GF21978@iris.ozlabs.ibm.com> In-Reply-To: <1402695828-91537-1-git-send-email-davvid@gmail.com> On Fri, Jun 13, 2014 at 02:43:48PM -0700, David Aguilar wrote: > gitk uses a predictable ".gitk-tmp.$PID" pattern when generating > a temporary directory. > > Use "mktemp -d .gitk-tmp.XXXXXX" to harden gitk against someone > seeding /tmp with files matching the pid pattern. > > Signed-off-by: David Aguilar Thanks, applied. Paul.