From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,9960fa51a4a478af
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2002-02-11 11:30:00 PST
Path: 
 archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!news.ebone.net!news1.ebone.net!newsfeed.vmunix.org!newsfeed2.easynews.net!easynews.net!news.cid.net!news.enyo.de!not-for-mail
From: Florian Weimer <fw@deneb.enyo.de>
Newsgroups: comp.lang.ada
Subject: Re: ACT announces availability of GNAT 3.14p
Date: Mon, 11 Feb 2002 20:16:55 +0100
Organization: Enyo -- not your organization
Message-ID: <87sn874ymw.fsf@deneb.enyo.de>
References: <5ee5b646.0201301849.4e951bcb@posting.google.com>
 <e7ebd224.0202061336.767f7a9d@posting.google.com>
 <87k7tkkqbo.fsf@deneb.enyo.de> <XLQoaxSGta64@eisner.encompasserve.org>
NNTP-Posting-Host: deneb.enyo.de
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: cygnus.enyo.de 1013455021 11330 212.9.189.171 (11 Feb 2002 19:17:01
 GMT)
X-Complaints-To: abuse@enyo.de
NNTP-Posting-Date: 11 Feb 2002 19:17:01 GMT
Cancel-Lock: sha1:hrpbi055LWSC3eZxIGZqnp4ANwU=
Xref: archiver1.google.com comp.lang.ada:19880
Date: 2002-02-11T19:17:01+00:00
List-Id: <comp.lang.ada>

Kilgallen@SpamCop.net (Larry Kilgallen) writes:

> I believe saying "*all* programs running on a multi-user system which
> create temporary files" is overly broad.

Yes, I think I dropped the UNIX reference somewhere above.

> I would hope that on Unix there is some way to redefine /tmp so
> as to provide more protection.

I believe some rather special variants can do that (probably UNICOS/mk
or something like that), but it is by no means a common feature.

> But attempting to make the default use of /tmp by an Ada program
> more secure than the default use of /tmp by a shell script will be
> effective only if you also prevent use of /tmp by shell scripts.

At least on non-proprietary UNIX-like systems, thinks are getting
better, and one shell script is fixed after the other.