Bruno Haible wrote:
/tmp is world-writable but a directory created by a user in /tmp is not world-writable (assuming an umask of at least 002). Therefore I don't see a security problem here.
HP-UX has a default umask of 000. At least if I log on and don't change it myself, that's what I get. IMO this is not a safe assumption.
-- Matthew "Have you tried that new mixed drink, 'GDR'"? "What is it?" "Gin, Duck and Rum. It tastes fowl."
