Comment 14 for bug 1600582

OK, mvo suggested that debsig-verify had /tmp hardcoded, and that this is fixed in the newer version from xenial. However, after having built and installed it on my phone, i don't see any difference in behavior. I don't see any files getting created in TMPDIR beyond a simple domain socket, which is presumably coming from click or something else, which gets destroyed after a package is finished installing. There are no other files appearing in TMPDIR while watching it with "watch ls -la $TMPDIR" yet the "used" memory count displayed in top, seems to increase to roughly the size of the click being installed.

I don't know where this is coming from exactly, but it seems it's not actually debsig-verify that is the problem here.