Hello Nicholas, On Wed, Apr 13, 2011 at 12:31 AM, Nicholas Marriott < nicholas.marri...@gmail.com> wrote:
> Hi > > Not to say I told you so or anything, but this might be a good time to > reiterate that doing this is a bad idea: the minor inconvenience it > prevents (easily avoided by the user with either tmux -S or by setting > TMPDIR) is much less of a potential problem than running with elevated > privileges. > Romain and I are about to change the behaviour and drop the privileges completely. Maybe at the end it will be only setting a proper TMPDIR or having a note for the users to point out to how to use 'tmux -S'. I should have considered this in the first place. > > Now I'm going to have to spend at least some of my time saying "no, not > tmux, Debian security problem"... > As this is my fault for having introduced the modifcations I apologize deeply for wasting your time. For the record Ubuntu is affected too but not Fedora which has a seperate group 'tmux'. Best regards, Ferdinand
