Comment 3 for bug 1174608
Revision history for this message
| Thierry Carrez (ttx) wrote Re: Insecure directory creation for signing | #3 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Ew. One would think that everyone knows that naming stuff under /tmp is bad, by now.
Adding Dolph and Russell for further discussion.
On upgrade, removing the default value will not make those who copied api-paste.ini magically secure, so I'd rather (or in addition) fix the temporary directory creation.