diff options
| author | Micah Anderson <micah@riseup.net> | 2005-09-28 14:47:51 +0000 |
|---|---|---|
| committer | Micah Anderson <micah@riseup.net> | 2005-09-28 14:47:51 +0000 |
| commit | d9d59cd6e90cb745d8886d6376a0ed97eb6761ef (patch) | |
| tree | 2fd6da97224ea78d5d368ddde75880cdc0909775 | |
| parent | 8ca18d0b0385e7ba78d0f20ed0e2558ab3c31ff2 (diff) | |
| download | backupninja-d9d59cd6e90cb745d8886d6376a0ed97eb6761ef.tar.gz backupninja-d9d59cd6e90cb745d8886d6376a0ed97eb6761ef.tar.bz2 | |
Fixed insecure temporary file creation
| -rwxr-xr-x | backupninja | 9 | ||||
| -rw-r--r-- | changelog | 1 |
2 files changed, 9 insertions, 1 deletions
diff --git a/backupninja b/backupninja index e5c55ae..d52f4cd 100755 --- a/backupninja +++ b/backupninja @@ -305,7 +305,14 @@ function process_action() { let "actions_run += 1" # call the handler: - local bufferfile="/tmp/backupninja.buffer.$$" + [ if -x /bin/mktemp ] + then + local bufferfile=`mktemp /tmp/backupninja.buffer.XXXXXXXX` + else + DATE=`date` + sectmp=`echo $DATE | /usr/bin/md5sum | cut -d- -f1` + local bufferfile=/tmp/backupninja.buffer.$sectmp + fi echo "" > $bufferfile echo_debug_msg=1 ( @@ -1,4 +1,5 @@ removed erroneous magic file marker in pgsql handler + fixed insecure temporary file creation version 0.8 -- September 15 2005 added pgsql (PostgreSQL) handler, with vservers support. added vservers support to duplicity handler |