mkinitrd: possibly insecure temp directory creation
Bug #12182 reported by
Danilo Piazzalunga
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| initrd-tools (Ubuntu) |
Fix Released
|
Medium
|
Jeff Bailey | ||
Bug Description
mkinitrd creates a temporary directory (its workdir) in a possibly insecure way.
Making it use mktemp is a trivial one-line change.
Revision history for this message
| Danilo Piazzalunga (danilopiazza) wrote | #1 |
Revision history for this message
| Jeff Bailey (jbailey) wrote | #2 |
Revision history for this message
| Matt Zimmerman (mdz) wrote | #3 |
To post a comment you must log in.
Created an attachment (id=1113)
Use mktemp instead of $$ to create the working directory