From: Florian Weimer Date: Mon, 18 Apr 2005 12:12:40 GMT Subject: Re: fix mktemp (remove mktemp ;) Message-ID: <87u0m4cmh3.fsf@deneb.enyo.de> In-Reply-To: * Herbert Xu: > Paul Jackson wrote: >> >> Even mktemp(1) can collide, in theory, since there is no practical way >> in shell scripts to hold open and locked the file from the instant of it >> is determined to be a unique name. > > mktemp(1) creates the file before exiting. Other instances of mktemp(1) > cannot successfully create the same file (they all use O_EXCL). > Therefore this race does not exist, even in theory :) /tmp cleaners exist, but the risks are minimal for programs which aren't SUID/SGID.