Comment 11 for bug 1192966

Revision history for this message
Grant Murphy (gmurphy) wrote :

@cthier I think that is actually part of the fix that python-setuptools has been adding to fix this issue... There is still a toctou race condition elsewhere that has not been correctly addressed by this code. In any case I would recommend not setting the PYTHON_EGG_CACHE to /tmp unless it is absolutely necessary. (Even if the exploit is unlikely).