[TriLUG] log monitoring (read this: Security ALERT!)

Jeremy P jeremyp at pobox.com
Wed Feb 20 12:46:56 EST 2002


On Wed, 20 Feb 2002, Jon Carnes wrote:

> The truth be known, I use /root/tmp for these... but modified the scripts
> for general use.

Well, that's fine, but I still think it's good to be in the habit of using
mktemp (or mkstemp(3) for you programmers) anytime you need a temporary
file.  I'm amazed at the number of programs out there which still use
unsafe temporary file generation, even given the amount of attention this
has gotten on Bugtraq and other security fora.

--Jeremy




More information about the TriLUG mailing list