logoalt Hacker News

dogleashyesterday at 6:26 PM1 replyview on HN

Permission and timing gotchas in /tmp predate snap and systemd. It's why things like `mkstemp` exist.

I remember cron jobs that did what systemd-tmpfiles-clean does before it existed. All unix daemons using /tmp run the risk of misusing /tmp. I don't know snap well enough to say anything about it makes it uniquely more susceptible to that.


Replies

SoftTalkeryesterday at 7:10 PM

The mistake seems to be using a predictable path (/tmp/.snap) in a publicly-writable directory.

show 1 reply